The AI trust platform for agents

Every agent action:

Every agent action:

Every agent action:

known, checked, decided, proven.

known, checked, decided, proven.

known, checked, decided, proven.

OpenBox checks every agent tool call against your policies before it runs, then seals the result as a tamper-proof Proof Certificate. Run Community on your own machine, or deploy Enterprise as SaaS or on-premise.

OpenBox checks every agent tool call against your policies before it runs, then seals the result as a tamper-proof Proof Certificate.

Community ยท Coming soon

Free, runs on your machine

Book a demo

refund-agent ยท live trace

GOVERNED

refund.issue(amount=ยฃ2,400)

Refunds over ยฃ500 need approval

REQUIRE_APPROVAL

email.send(to=customer)

Mask PII in outbound email

CONSTRAIN

db.read(table=orders)

Read-only tables

ALLOW

shell.exec("rm -rf /data")

No destructive shell commands

BLOCK

REQUIRE_APPROVAL

Approval needed

refund.issue ยฃ2,400 is held by โ€œRefunds over ยฃ500โ€.

Approve

Deny

Proof Certificate

Sealed and signed

sha256 9f3cโ€ฆa71e

rule v12 ยท tier 3 ยท 14:02:11Z

Trust Tier 3

5

5

verdicts for every tool call

verdicts for every tool call

14

14

risk parameters assessed

risk parameters assessed

4

4

Trust Tiers

Trust Tiers

9

9

framework integrations

framework integrations

Works with your stack

Govern the agent stack

Govern the agent stack

Govern the agent stack

you already run.

you already run.

you already run.

One SDK, no architecture changes. Your workflow engine stays the system of record.

One SDK, no architecture changes. Your workflow engine stays the system of record.

Frameworks

Workflow

Coding agents

SDKs

Agent frameworks

Python and TypeScript

CrewAI logo

CrewAI

CrewAI

Python

Python

LangChain logo

LangChain

LangChain

Python

Python

LangGraph logo

LangGraph

LangGraph

Python

Python

Deep Agents logo

Deep Agents

Deep Agents

Python

Python

CopilotKit logo

CopilotKit

CopilotKit

TypeScript

TypeScript

Mastra logo

Mastra

Mastra

TypeScript

TypeScript

Workflow & routing

Temporal logo

Temporal

Temporal

Python

Python

n8n logo

n8n

n8n

Automation

Automation

OpenRouter logo

OpenRouter

OpenRouter

TypeScript

TypeScript

Coding agents

Cursor logo

Cursor

Cursor

Coming soon

OpenClaw logo

OpenClaw

OpenClaw

Coming soon

SDK languages

Python logo

Python

Python

SDK

SDK

TypeScript logo

TypeScript

TypeScript

SDK

SDK

The outcome

Let agents act.

Let agents act.

Let agents act.

Keep control.

Keep control.

Keep control.

The hard part is not building agents. It is letting them act without creating financial, operational or compliance risk.

The hard part is not building agents. It is letting them act without creating financial, operational or compliance risk.

01

Know every action

Register each agent and see every tool call it makes: who, what, and with which data.

refund.issue(ยฃ2,400)

14:02:11

db.read(orders)

14:02:09

email.send(customer)

14:02:07

02

Check against policy

Guardrails, OPA policies and behavioral rules evaluate each call before it executes.

Rule ยท Refunds over ยฃ500

amount โ‰ค ยฃ500

ALLOW

amount > ยฃ500

REQUIRE_APPROVAL

03

Decide with humans

Route sensitive operations to approval instead of hiding the decision path.

REQUIRE_APPROVAL

refund.issue ยฃ2,400 is on hold

Approve

Deny

04

Prove what happened

Proof Certificates tie every decision to the policy in force, tamper-proof.

Proof Certificate

sha256 9f3cโ€ฆa71e

โœ“ Signed ยท rule v12 ยท tier 3

The Trust Lifecycle

Five phases.

Five phases.

Five phases.

One continuous loop.

One continuous loop.

One continuous loop.

Each phase maps to a screen in the platform you operate every day.

Each phase maps to a screen in the platform you operate every day.

01

Assess

02

Authorize

03

Monitor

04

Verify

05

Adapt

Continuous

Trust Tier 1โ€“4

Assessed first, adapted over time

01

Assess

Baseline risk across 14 parameters, then assign Trust Tier 1โ€“4.

02

Authorize

Guardrails, then OPA policies, then behavioral rules.

03

Monitor

Real-time runtime visibility: drift, cost and latency.

04

Verify

Goal alignment plus tamper-proof Proof Certificates.

05

Adapt

Human approvals and policy suggestions drawn from patterns.

Access is not authority

Access is not authority

Access lets an agent in.

Access lets an agent in.

Access lets an agent in.

Authority decides what it can do.

Authority decides what it can do.

Authority decides what it can do.

IAM and RBAC establish access. OpenBox adds the runtime decision layer you need once agents act on their own, based on the action, its context and the policy in force.

IAM and RBAC establish access. OpenBox adds the runtime decision layer you need once agents act on their own, based on the action, its context and the policy in force.

ALLOW

The action runs as requested.

CONSTRAIN

Runs with limits, such as masked fields.

REQUIRE_APPROVAL

Held until a human approves.

BLOCK

Refused, and the agent is told why.

HALT

Stops the agent entirely.

Quickstart

Your framework.

Your framework.

Your framework.

Your quickstart.

Your quickstart.

Your quickstart.

Add the trust layer to your existing agent in 5 minutes. Pick your stack and see the one change it takes.

Add the trust layer to your existing agent in 5 minutes. Pick your stack and see the one change it takes.

CrewAI logo

CrewAI

Python

โ—

LangChain logo

LangChain

Python

โ†’

LangGraph logo

LangGraph

Python

โ†’

Temporal logo

Temporal

Python

โ†’

Mastra logo

Mastra

TypeScript

โ†’

CopilotKit logo

CopilotKit

TypeScript

โ†’

Also n8n, OpenRouter and Deep Agents. Cursor and OpenClaw soon.

CrewAI logo

CrewAI quickstart

Python

SDK

1

Register your agent

Create it in the OpenBox Dashboard and get an API key.

2

Install the SDK

Use the Python or TypeScript SDK for your framework.

3

Wrap your crew

Wrap your crew. Its structure stays recognizable.

One code change

CrewAI

OpenBox

crew.py

GOVERNED

 1

from crewai import Crew, Process

 2

from openbox import OpenBoxAgent, OpenBoxTask, create_openbox_engine

 3

 

 4

researcher = OpenBoxAgent(

 5

    role="Researcher",

 6

    env_prefix="OPENBOX_RESEARCHER",

 7

)

 8

# โ€ฆ your tasks and crew, unchanged

 9

with create_openbox_engine() as engine:

10

    result = engine.govern(crew).kickoff()

What OpenBox captures

โœ“

Task boundary events

โœ“

Approvals, blocks and halts

โœ“

Guardrail outcomes

Read quickstart โ†’

Editions

Start free.

Start free.

Start free.

Scale when you are ready.

Scale when you are ready.

Scale when you are ready.

Community runs on your own computer. Enterprise comes as SaaS or on-premise, with the same policies you wrote locally.

Community runs on your own computer. Enterprise comes as SaaS or on-premise, with the same policies you wrote locally.

Community ยท Free

Start local. Govern in minutes.

Download OpenBox Community and run it on your own computer. Same SDK, same verdicts, same Proof Certificates you will use in Enterprise.

Download OpenBox Community and run it on your own computer. Same SDK, same verdicts, same Proof Certificates you will use in Enterprise.

โœ“

Runs entirely on your machine

โœ“

Local dashboard with live traces and approvals

โœ“

Move to SaaS or on-premise with no rewrite

Community ยท Coming soon

Free, runs on your machine

Terminal

$ <download community>        # method TBC

$ openbox start

 

โœ“ OpenBox Community is running

โœ“ Dashboard   http://localhost:<port>

โœ“ Policy engine and guardrails loaded

 

# connect your agent

$ pip install <openbox-sdk>

Local dashboard

Illustrative

refund.issue

REQUIRE_APPROVAL

db.read

ALLOW

shell.exec

BLOCK

Enterprise ยท SaaS or on-premise

Hosted by OpenBox

Enterprise SaaS

A managed platform, updated and operated for you.

โœ“

Managed, always up to date

โœ“

SSO and role-based access

โœ“

Approvals and compliance reporting

โœ“

Support with an SLA

Book a demo

Your infrastructure

Enterprise On-premise

Deploy in your own cloud or data center.

โœ“

Full data residency control

โœ“

Private networks and air-gap

โœ“

SSO and role-based access

โœ“

Support with an SLA

Talk to sales

Compare all features on the Pricing page โ†’

Ready to govern

Ready to govern

Ready to govern

your agents?

your agents?

your agents?

Download Community and run it today, or talk to us about Enterprise.

Download Community and run it today, or talk to us about Enterprise.

Download Community and run it today, or talk to us about Enterprise.

Community ยท Coming soon

Book a demo

By clicking โ€œAccept All,โ€ you agree to the storing of cookies and other technologies on your device to enhance our siteโ€™s operation, tailor and enhance your browsing experience, measure website performance and traffic, improve our services, and present relevant offers and advertisements. See our Cookies Policy.

By clicking โ€œAccept All,โ€ you agree to the storing of cookies and other technologies on your device to enhance our siteโ€™s operation, tailor and enhance your browsing experience, measure website performance and traffic, improve our services, and present relevant offers and advertisements. See our Cookies Policy.