FREEDOM251

Freedom251 › AI Guardrail Software

OpenGuardrails

Paid APISelf-hostedWeb

Visit OpenGuardrails Alternatives Pricing

OpenGuardrails's own site

What OpenGuardrails is

OpenGuardrails AIRS is a commercial runtime service for testing, inspecting, and protecting AI agents. It evaluates tool calls, resources, and accounts before a model sees a request, then checks responses before an agent acts. Runtime decisions can allow, block, or redact, with findings and redaction spans. The console includes a live monitor, agent and session explorer, findings triage, policies, a playground, and API keys. Integrations use the API directly rather than an SDK; the documented recipe uses two POSTs per model call. Starter masks secrets on the customer host before requests leave, then restores them only into tool arguments. Private deployments can run on customer Kubernetes or VMs with customer datastores and a model gateway in the customer environment. The OGR protocol is an open Apache-2.0 specification with published JSON Schemas, while the runtime product is commercial. Starter costs $10 a month, billed monthly with cancellation anytime; there is no free plan. The default rate limit is 600 requests per minute per API key. If the runtime is unreachable, local fail policies default to open unless categories are explicitly set to closed.

Who it suits

OpenGuardrails suits teams that need runtime checks for AI agents and can integrate through an API. Its private deployment option is relevant to customers wanting infrastructure, datastores, and a model gateway in their own environment.

What it does well

  • Evaluates requests and responses at runtime.
  • Can allow, block, or redact with findings.
  • Starter masks secrets on the customer host.
  • Private deployments use customer infrastructure.
  • The OGR protocol is an open Apache-2.0 specification.

What to know first

  • No free plan is available.
  • There is no SDK; integrations use the API directly.
  • Default limit is 600 requests per minute per API key.
  • Unreachable-runtime policies default to open unless configured otherwise.

Limits

Starter costs $10 a month and includes secret masking, a secret ledger, and detection for secrets, PII, dangerous commands and credential files. Pro costs $20 a month and adds model judges, one-agent sizing and four policy templates; the default API-key rate limit is 600 requests per minute.

Plans

PlanBilled and limitsPrice
StarterBilled monthly; cancel anytime. · Secret masking on your host · Secret ledger · Detects secrets, PII, dangerous commands and credential files$10 a month
MaxBilled monthly; cancel anytime. · From $100/month · $100/month for 5x or $200/month for 20x · Multimodal storage and display · Priority evaluation$100 a month
ProBilled monthly; cancel anytime. · Includes Starter · Model judges on every tool call, prompt and reply · Sized for one agent in normal use · Four policy templates$20 a month
EnterpriseAnnual license; priced on fleet size. · Private deployment · Events stay in your infrastructure · Enterprise SSO or admin provisioning · Support with an SLAOn request

As openguardrails.com lists them, read 4 Oct 2026. The maker's own page has the final word.

Getting started

  1. Choose a Starter, Pro, Max or Enterprise plan
  2. Use the API directly because integrations do not use an SDK
  3. Configure the runtime and local fail policies for unreachable-service behavior
  4. Connect a listed integration or your own API workflow
  5. For private deployment, run it on customer Kubernetes or VMs with customer datastores

Verdict

OpenGuardrails offers runtime agent checks, a monitoring console, and private deployment options, with a commercial runtime and an open protocol specification. Teams should consider its API integration approach, rate limit, and fail-policy behavior when evaluating it.

Questions

Does OpenGuardrails have a free plan?

No. Paid plans start with Starter at $10 a month, billed monthly with cancellation anytime.

Which platforms and deployment options are supported?

It is available through an API and web console, with self-hosted private deployment on customer Kubernetes or VMs.

Is there an SDK?

No SDK is provided; integrations use the API directly, with two POST requests per model call in the documented recipe.

Which integrations are listed?

The plugin index includes Higress, DeepSeek Harness, litellm, Claude Code, Codex, opencode, OpenClaw, Hermes, LangGraph and a mitmproxy gateway example.

What happens if the runtime cannot be reached?

Integrations use local preconfigured fail policies that default to open unless categories are explicitly set to closed.

What is the OGR protocol?

OGR is an open Apache-2.0 specification with published JSON Schemas; the runtime product is commercial.

Facts from OpenGuardrails's own pages

Console
The console includes a live monitor, agent and session explorer, findings triage, policies, a playground and API keys. · openguardrails.com, 4 Oct 2026
Headquarters
Sheridan, Wyoming, United States · openguardrails.com, 28 Sept 2026
Integration method
There is no SDK; integrations use the API directly, with two POSTs per model call in the documented recipe. · openguardrails.com, 4 Oct 2026
Integrations
The plugin index lists Higress, DeepSeek Harness, litellm, Claude Code, Codex, opencode, OpenClaw, Hermes, LangGraph and a mitmproxy gateway example. · openguardrails.com, 4 Oct 2026
Open protocol
The OGR protocol is an open Apache-2.0 specification with published JSON Schemas; the runtime product is commercial. · openguardrails.com, 4 Oct 2026
Operational limit
The default rate limit is 600 requests per minute per API key. · openguardrails.com, 4 Oct 2026
Private deployment
Private deployments run on customer Kubernetes or VMs with customer datastores and a model gateway hosted in the customer environment. · openguardrails.com, 4 Oct 2026
Purpose
OpenGuardrails AIRS tests, inspects and protects AI agents at runtime. · openguardrails.com, 4 Oct 2026
Runtime checks
It evaluates tool calls, resources and accounts before the model sees a request and checks responses before the agent acts on them. · openguardrails.com, 4 Oct 2026
Security and privacy
Starter masks secrets on the customer host before a request leaves it and restores them only into tool arguments. · openguardrails.com, 4 Oct 2026
Service behavior
When the runtime is unreachable, integrations use local preconfigured fail policies that default to open unless categories are explicitly set to closed. · openguardrails.com, 4 Oct 2026
Support
The Enterprise plan includes support with an SLA. · openguardrails.com, 4 Oct 2026
Verdicts
The runtime returns allow, block or redact decisions, along with findings and redaction spans. · openguardrails.com, 4 Oct 2026

Where OpenGuardrails stands on Freedom251

Look at these too