Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Kastra serves as the crucial authorization framework for AI systems, determining the permissions of agents, models, and tools prior to their execution. Positioned along the execution path of all interactions such as prompts, tool calls, shell commands, database operations, and API requests, it evaluates each action based on deterministic, attribute-driven policies, rendering decisions to allow, deny, redact, or escalate in less than a millisecond. In contrast to monitoring solutions that only track AI actions post-execution, Kastra proactively prevents unauthorized activities before they can impact any tool, API, database, or production environment. Its comprehensive control plane integrates a policy engine, edge decision-making capabilities, various integrations, and a tamper-proof evidence vault that securely signs each decision for auditing and replay purposes. Furthermore, with Kastra Edge, local enforcement is extended to developer environments, safeguarding coding agents such as Claude Code, Cursor, and Codex CLI from harmful commands, unauthorized data extraction, unsafe file modifications, and improper tool usage. This proactive approach to authorization not only enhances security but also ensures compliance and accountability in AI-driven processes.

Description

nono is a novel open-source sandbox that utilizes kernel enforcement to create a secure environment for AI coding agents and LLM tasks. In contrast to traditional policy-based guardrails that merely monitor and filter operations, nono leverages operating system security features—specifically Landlock on Linux and Seatbelt on macOS—to render unauthorized operations impossible at the syscall level. With just a single command, you can encapsulate any AI agent, including Claude Code, OpenCode, OpenClaw, or any command-line interface process. The system automatically enforces a default-deny policy for filesystem access, restricts harmful commands (such as rm, dd, chmod, and sudo), isolates sensitive credentials and API keys, and extends all imposed restrictions to any child processes, ensuring there's no avenue for escape once limitations are set. Built-in profiles allow for rapid deployment, and secrets can be injected from the system keystore in a secure manner, with automatic zeroization upon exit. Additionally, future enhancements such as audit logging, atomic rollbacks, and Sigstore-attested policy signing are planned, offering robust tracking and security features. It operates under the Apache 2.0 license and is developed by the same creator behind Sigstore, further emphasizing its credibility and reliability in securing AI workloads.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

No images available

Integrations

Claude Code Yes 
OpenClaw Yes 
Codex CLI Yes 
Cursor Yes 
Go Yes 
Google Sheets Yes 
JSON Yes 
Java Yes 
Microsoft Excel Yes 
OpenAI Yes 
OpenAI Codex No 
OpenCode No 
Python Yes 
Rust Yes 
Slack Yes 
Swift Yes 
TypeScript Yes 
YAML Yes 

Integrations

Claude Code Yes 
OpenClaw Yes 
Codex CLI No 
Cursor No 
Go No 
Google Sheets No 
JSON No 
Java No 
Microsoft Excel No 
OpenAI No 
OpenAI Codex Yes 
OpenCode Yes 
Python No 
Rust No 
Slack No 
Swift No 
TypeScript No 
YAML No 

Pricing Details

$19.99 per month
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac Yes 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Kastra

Founded

2026

Country

United States

Website

kastra.ai/

Vendor Details

Company Name

Always Further

Founded

2025

Country

United Kingdom

Website

alwaysfurther.ai/

Product Features

Alternatives

Alternatives

Spawn Reviews

Spawn

OpenRouter