Freedom251 › AI Guardrail Software
OpenGuardrails

What OpenGuardrails is
OpenGuardrails AIRS is a commercial runtime service for testing, inspecting, and protecting AI agents. It evaluates tool calls, resources, and accounts before a model sees a request, then checks responses before an agent acts. Runtime decisions can allow, block, or redact, with findings and redaction spans. The console includes a live monitor, agent and session explorer, findings triage, policies, a playground, and API keys. Integrations use the API directly rather than an SDK; the documented recipe uses two POSTs per model call. Starter masks secrets on the customer host before requests leave, then restores them only into tool arguments. Private deployments can run on customer Kubernetes or VMs with customer datastores and a model gateway in the customer environment. The OGR protocol is an open Apache-2.0 specification with published JSON Schemas, while the runtime product is commercial. Starter costs $10 a month, billed monthly with cancellation anytime; there is no free plan. The default rate limit is 600 requests per minute per API key. If the runtime is unreachable, local fail policies default to open unless categories are explicitly set to closed.
Who it suits
OpenGuardrails suits teams that need runtime checks for AI agents and can integrate through an API. Its private deployment option is relevant to customers wanting infrastructure, datastores, and a model gateway in their own environment.
What it does well
- Evaluates requests and responses at runtime.
- Can allow, block, or redact with findings.
- Starter masks secrets on the customer host.
- Private deployments use customer infrastructure.
- The OGR protocol is an open Apache-2.0 specification.
What to know first
- No free plan is available.
- There is no SDK; integrations use the API directly.
- Default limit is 600 requests per minute per API key.
- Unreachable-runtime policies default to open unless configured otherwise.
Limits
Starter costs $10 a month and includes secret masking, a secret ledger, and detection for secrets, PII, dangerous commands and credential files. Pro costs $20 a month and adds model judges, one-agent sizing and four policy templates; the default API-key rate limit is 600 requests per minute.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Starter | Billed monthly; cancel anytime. · Secret masking on your host · Secret ledger · Detects secrets, PII, dangerous commands and credential files | $10 a month |
| Max | Billed monthly; cancel anytime. · From $100/month · $100/month for 5x or $200/month for 20x · Multimodal storage and display · Priority evaluation | $100 a month |
| Pro | Billed monthly; cancel anytime. · Includes Starter · Model judges on every tool call, prompt and reply · Sized for one agent in normal use · Four policy templates | $20 a month |
| Enterprise | Annual license; priced on fleet size. · Private deployment · Events stay in your infrastructure · Enterprise SSO or admin provisioning · Support with an SLA | On request |
As openguardrails.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Choose a Starter, Pro, Max or Enterprise plan
- Use the API directly because integrations do not use an SDK
- Configure the runtime and local fail policies for unreachable-service behavior
- Connect a listed integration or your own API workflow
- For private deployment, run it on customer Kubernetes or VMs with customer datastores
Verdict
OpenGuardrails offers runtime agent checks, a monitoring console, and private deployment options, with a commercial runtime and an open protocol specification. Teams should consider its API integration approach, rate limit, and fail-policy behavior when evaluating it.
Questions
Does OpenGuardrails have a free plan?
No. Paid plans start with Starter at $10 a month, billed monthly with cancellation anytime.
Which platforms and deployment options are supported?
It is available through an API and web console, with self-hosted private deployment on customer Kubernetes or VMs.
Is there an SDK?
No SDK is provided; integrations use the API directly, with two POST requests per model call in the documented recipe.
Which integrations are listed?
The plugin index includes Higress, DeepSeek Harness, litellm, Claude Code, Codex, opencode, OpenClaw, Hermes, LangGraph and a mitmproxy gateway example.
What happens if the runtime cannot be reached?
Integrations use local preconfigured fail policies that default to open unless categories are explicitly set to closed.
What is the OGR protocol?
OGR is an open Apache-2.0 specification with published JSON Schemas; the runtime product is commercial.
Facts from OpenGuardrails's own pages
- Console
- The console includes a live monitor, agent and session explorer, findings triage, policies, a playground and API keys. · openguardrails.com, 4 Oct 2026
- Headquarters
- Sheridan, Wyoming, United States · openguardrails.com, 28 Sept 2026
- Integration method
- There is no SDK; integrations use the API directly, with two POSTs per model call in the documented recipe. · openguardrails.com, 4 Oct 2026
- Integrations
- The plugin index lists Higress, DeepSeek Harness, litellm, Claude Code, Codex, opencode, OpenClaw, Hermes, LangGraph and a mitmproxy gateway example. · openguardrails.com, 4 Oct 2026
- Open protocol
- The OGR protocol is an open Apache-2.0 specification with published JSON Schemas; the runtime product is commercial. · openguardrails.com, 4 Oct 2026
- Operational limit
- The default rate limit is 600 requests per minute per API key. · openguardrails.com, 4 Oct 2026
- Private deployment
- Private deployments run on customer Kubernetes or VMs with customer datastores and a model gateway hosted in the customer environment. · openguardrails.com, 4 Oct 2026
- Purpose
- OpenGuardrails AIRS tests, inspects and protects AI agents at runtime. · openguardrails.com, 4 Oct 2026
- Runtime checks
- It evaluates tool calls, resources and accounts before the model sees a request and checks responses before the agent acts on them. · openguardrails.com, 4 Oct 2026
- Security and privacy
- Starter masks secrets on the customer host before a request leaves it and restores them only into tool arguments. · openguardrails.com, 4 Oct 2026
- Service behavior
- When the runtime is unreachable, integrations use local preconfigured fail policies that default to open unless categories are explicitly set to closed. · openguardrails.com, 4 Oct 2026
- Support
- The Enterprise plan includes support with an SLA. · openguardrails.com, 4 Oct 2026
- Verdicts
- The runtime returns allow, block or redact decisions, along with findings and redaction spans. · openguardrails.com, 4 Oct 2026
Where OpenGuardrails stands on Freedom251
- AI Guardrail Software#18 of 23