Skip to content
InfratoApp
Layers / Security / Governance / Compliance and governance

Compliance and governance

COMPARE TWO OF THESE →

Tools that help an organisation reach and evidence a standard — SOC 2, ISO, the EU AI Act: control mapping, evidence collection, audit trails. These are compliance software rather than compliant vendors, which is why the assurance questions asked of every other category read oddly here.

19 in this category
SORTED BY STARS · 2 UNMEASURED, GROUPED LAST

NARROW BY WHAT THIS CATEGORY ASKS

LICENCE · 7 NOT READ

FRAMEWORKS · 10 NOT READ

DEPLOYMENT · 15 NOT READ

PRODUCTUSED BYSTARSDOWNLOADS 30D
bifrostFastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.8,214superagentSuperagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.6,749openmedLocal-first healthcare AI: clinical NER & HIPAA PII de-identification that runs 100% on-device. 2,200+ medical models, 21 languages, Apple MLX + Python, no cloud, no patient data leaving your network.5,302failproofaiObservability and enforcement for AI agent harnesses. Capture every run and runtime reliability with policy enforcement. 40 built-in policies, a local dashboard, no account required with a generous f2,874valqoreSafety-first guardrails for AI-driven cloud and Kubernetes operations1,929fuzzyaiA powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.1,572cuga-agentCUGA is an open-source generalist agent harness for the enterprise, supporting complex task execution on web and APIs, OpenAPI/MCP integrations, composable architecture, reasoning modes, and policy-aw877PipeLabOpen-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action rec841Aapi-relay-auditLocal security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web3 wallet risks.829ArcjetRuntime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.682adrianOpen-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.560agent-safe-pipelineReference architecture for AI agents that propose actions but cannot authorize them — immutable intent capture, an independent Decionis policy verdict (ALLOW/ESCALATE/BLOCK), verified human approval, 532cordumThe action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.504DataikuPrivacy proxy for your OpenAI requests428Project CodeGuardProject CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, transla423AgentSealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisonin371Prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agn343Arthur AIArthur Python SDK506Credo AIThe Trusted Leader in AI Governance

SORTED BY ONE STATED COLUMN · USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY — NOT A POPULARITY FIGURE · NO OVERALL SCORE AND NO RANK COLUMN, BECAUSE BLENDING ADOPTION, STARS AND DOWNLOADS NEEDS WEIGHTS, AND WEIGHTS ARE AN OPINION PRESENTED AS ARITHMETIC

Cite this page

The count and its date sit inside the citation, because “Compliance and governance” without a date is a claim that quietly goes wrong as the category fills.

infratoapp, “Compliance and governance — Security / Governance”, read 27 October 2026. 19 listed products. https://www.infratoapp.com/layers/security/compliance

No overall score, and no rank column

Blending adoption, stars and downloads needs weights, and weights are an opinion presented as arithmetic — so this table sorts by one stated column at a time and shows which. This view holds no billing column and joins no billing table: a sponsor cannot appear higher, and the signals meter is a row’s own confidence, never a score you can sort on.

Frequently asked

What is in the Compliance and governance category?
19 products in the Security / Governance layer of the AI stack. Tools that help an organisation reach and evidence a standard — SOC 2, ISO, the EU AI Act: control mapping, evidence collection, audit trails. These are compliance software rather than compliant vendors, which is why the assurance questions asked of every other category read oddly here. Listed members include bifrost, superagent and openmed. Every fact on each listing carries the page it was read from and the date it was read.
How are Compliance and governance compared here?
By the 7 attributes this category declares, asked of every member and answered only where a source states it. A product with no answer on record shows a gap rather than a guess, and no blended score is published — weights would be an opinion presented as arithmetic.
bifrost or superagent?
Both are listed under Compliance and governance. We publish no verdict between them — we hold no benchmark that would support one. What we do hold is the same attribute sheet for each, side by side with the source behind every value, at /compare/bifrost-vs-superagent.
What does a blank mean on a compliance and governance row?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A listing with a blank has not failed the question; it has not been read for it.
How often are compliance and governance figures re-read?
Every value carries the date it was read and a link to the page it came from. Prices move fastest and are re-read most often; an attribute read weeks ago says so rather than presenting itself as current. Anything past 21 days is hidden rather than shown stale.
Is this every compliance and governance there is?
No. This is 19 we have read and can cite. A directory that claimed completeness would be making a promise it cannot keep, so the page states its own count instead and says when a category is too thin to shortlist from.
Can a vendor pay to rank higher here?
No. Nothing on this page can be bought: a sponsor cannot enter a table, reorder a row or change a mark, and there is no ranked position for sale. How the site is paid for, and the line each source of money does not cross, is set out under money and independence at /our-data#sec5.