Skip to content
InfratoApp
Layers / Security / Governance / Compliance and governance / Project CodeGuard

Project CodeGuard

UNCLAIMED

COMPLIANCE AND GOVERNANCEGUARDRAILS AND FILTERING

Project CodeGuard — Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, transla. Listed under Compliance and governance in the Security / Governance layer. 2 of 13 comparison attributes are recorded, each with the page it was read from.

Project CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.

3 OF 4 SIGNALS HELD · MISSING LICENCE

Websiteproject-codeguard/rules

What it runs on, and what runs on it

0 cited edges
The differentiator

Computed from the stack graph, both directions. Every cited edge links the page it was read from; a vendor-added one links the vendor’s own source — this is the reason to be here rather than on the vendor’s own site.

No edges on record for Project CodeGuard.

Nothing in the directory documents depending on it, and its own docs do not name what it runs on. An edge is only stored when a source states it.

Submit a documented integration →

From Project CodeGuard? No claim is needed for this: a link to your docs that names what Project CodeGuard runs on is enough.

Open-source signals

LICENCE
not measured
DOWNLOADS 30D
not measured
LAST COMMIT
not measured

A HOLLOW RING IS UNMEASURED, NOT ZERO · WE DO NOT SUBSTITUTE A PARENT COMPANY’S REPOSITORY FOR A PRODUCT THAT HAS NONE

Price

We hold no price for this product.

Either the pricing is behind a sales call and there is no public page to read, or the last reading passed 21 days and was hidden rather than shown stale. If that changes — or if you publish /.well-known/pricing.json — it appears here with a capture date.

How we read prices →

What its categories ask

2 answered · 11 unanswered

13 questions declared by Compliance and governance and Guardrails and filtering. Most rows across the directory read like these.

ATTRIBUTEANSWEREVIDENCE · SOURCE
Checksinput validation, authentication, authorization, cryptography, supply chain, cloud security, platform security, data protection
“Our rules cover essential security domains: Cryptography : Safe algorithms (including post-quantum cryptography), secure key management, certificate validation Input Validation : SQL injection prevention, XSS protection, command injection defense Authentication : MFA best practices, OAuth/OIDC, secu”
2026-10-20
Open sourceYes
“Project CodeGuard is an open-source, model-agnostic security framework that embeds secure-by-default practices into AI coding agent workflows.”
2026-10-20
Air-gapped installno answer on record
Audit logno answer on record
Deploymentno answer on record
Evidence collectionno answer on record
Frameworksno answer on record
GDPR DPAno answer on record
Languagesno answer on record
Licenceno answer on record
Policy languageno answer on record
Real-time filteringno answer on record
SOC 2no answer on record

A ROW WITH NO ANSWER IS NOT A ROW WITH A “NO” · A VENDOR MAY ANSWER A BLANK ONE, MARKED VENDOR CLAIMED WITH ITS SOURCE · A DOCUMENTED VALUE IS DISPUTED, NOT OVERWRITTEN, AND STAYS VISIBLE WHILE WE RE-READ THE SOURCE

Practitioner reviews

Nobody has written one yet.

A review here is structured, not a star: hardware, scale band, what broke in production, and whether you would choose it again.

NO PERCENTAGE IS SHOWN UNDER FIVE REVIEWS · NO STAR RATINGS, EVER

Also in this category

32 products in Compliance and governance. Comparison defaults to within the category — pairing this with a GPU cloud would produce a page that means nothing.

NVIDIA NeMo GuardrailsUSED BY 1COMPARE →
adrianNO DEPENDENTS RECORDEDCOMPARE →
Adversa AINO DEPENDENTS RECORDEDCOMPARE →
agent-safe-pipelineNO DEPENDENTS RECORDEDCOMPARE →
agentosNO DEPENDENTS RECORDEDCOMPARE →
AgentSealNO DEPENDENTS RECORDEDCOMPARE →
ai-gatewayNO DEPENDENTS RECORDEDCOMPARE →
aktoNO DEPENDENTS RECORDEDCOMPARE →

USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY

Frequently asked

Does Project CodeGuard offer open source?
Yes. Read from their own page: “Project CodeGuard is an open-source, model-agnostic security framework that embeds secure-by-default practices into AI coding agent workflows.”.
What does a blank mean on the Project CodeGuard page?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A blank is an absence of evidence, and this page shows how many of its questions are in that state rather than quietly leaving them out.
Where do the Project CodeGuard figures come from?
Each one is read from a public page — usually the vendor's own documentation or pricing page — and carries a link to it with the date it was read. Nothing here is estimated, averaged across sources, or inferred from a similar product. If a figure cannot be traced to a page, it is not published.
Can Project CodeGuard change what this page says?
They can claim the listing and supply or correct values, which are then labelled as theirs. They cannot remove the page, hide a comparison they are losing, or change a figure somebody else recorded with a source. Nothing on the page is for sale. How the site is paid for is set out under money and independence at /our-data#sec5.
Something here is wrong — how do I fix it?
Dispute the value. Every figure links to the page it was read from, so a dispute names the value and gives a source that contradicts it. That is the only lever anyone has over this page, and it is the same lever for the vendor, a competitor and a reader.
Is this listing run by Project CodeGuard?
No. It is built from public sources, and no value on it came from the company. Anyone with an address at the company’s own domain can claim it for free. A claim lets the company write the tagline, description and logo, and answer blank questions or add dependencies, each marked as theirs with a source. Prices, licence and OSS figures stay as the directory read them, category changes only through our review, and each can be disputed with a source.

Cite this page

A model that quotes us should quote us correctly. The reading and its date sit inside the citation rather than beside it, because a quotation carrying only a URL goes wrong the week the URL changes.

infratoapp, “Project CodeGuard — Compliance and governance”, read 20 October 2026. Checks: input validation, authentication, authorization, cryptography, supply chain, cloud security, platform security, data protection as published at project-codeguard.org. https://www.infratoapp.com/products/rules

What Project CodeGuard can and cannot change here

Claiming the organisation lets its admins and editors change the tagline, description, logo, docs link and deployment model of every product that org owns — live, labelled as theirs, and logged. Answers to blank questions and dependencies go live too, marked as the owner’s and sourced; a documented answer cannot be overwritten. Everything else on this page is a stated fact with a dispute route: price, licence and OSS figures. Those columns are ungranted at the database level, so they are not a feature we withheld — they are a write that cannot happen. Name, category, website, pricing page and package names can be changed by the owner only through our review. A dispute never deletes a value; it marks it and publishes the correction.

Claim Project CodeGuardFree · email at the company’s own domain