PLATFORM · AGENT GUARDRAILS
Guardrailsfor every actionyour agents take.
Behind an API call. Inside the agent you built last week. Across a fleet of distributed workers at 3am. One policy engine decides what's allowed, everywhere your agents operate, every single time.
WATCH IT DECIDE
Every action gets a verdict. In real time.
These are real Praxis actions and real risk tiers. T0 reads sail through, T1/T2 pause for a decision, T3 secrets never get out. Move your mouse near the shield, or click it to trigger the kill switch.
Rendered entirely in your browser right now. Nothing here phones home either.
THE RISK
Agents got capable. Guardrails didn't keep up.
Your team is wiring agents into everything. Filesystems, payment flows, production APIs, their own custom-built tools. The capability arrived faster than the controls.
Blast radius
An agent that can read your files can also delete them. One that can browse can also click "Pay Now." One with API access can also push to main or charge a card. Capability and intent aren't the same thing, not until something enforces the gap.
Invisible execution
Once an agent starts acting, most teams lose sight of what actually happened. No record of which tool fired, which API was hit, or whether the action was ever actually safe to begin with.
Protocol sprawl
MCP tools, REST APIs, browser automation, custom in-house agents, every framework talks differently. Bolting a guardrail onto one doesn't cover the rest. You need one engine that sits underneath all of them.
ONE ENGINE, FOUR SURFACES
On-device is one surface. Not the whole idea.
The same policy engine, principal × risk tier, allow/block/ask, gates four different places an agent can act. Scroll to see all four.
Filesystem
Guarded fs_search / fs_read / fs_write / fs_delete tools. Every call is normalized, tiered, and routed through the same executor before it ever touches a file.
APIs & Tools
Praxis sits as a gateway in front of every downstream server. Agents never talk to Stripe or your database directly, only through the proxy.
Browser
A browser wrapper intercepts clicks, form-fills, and navigations before they fire, so an agent can't click "Pay Now" on its own.
Everything
A kernel-level authorizer gates file and exec syscalls directly, the same engine, one layer down. Covers custom-built agents, cloud-hosted agents, and fleets distributed across any number of machines.
HOW IT DECIDES
Same pipeline, every surface.
Identity
An unforgeable principal, you or a specific agent, rides every request.
Policy
Principal × risk tier decides allow, block, or ask. Secrets are a hard floor, never configurable.
Execute
Fail-closed dispatch. Destructive ops are trashed before they're ever truly destroyed.
Evidence
Every verdict is SHA-256 hash-chained. Tampering breaks the chain, not just the log.
PRICING
Free on-device. Full coverage when you need it.
Lite covers your filesystem, free forever. Pro and Team extend the same engine to APIs, browsers, custom agents, and fleets.
Lite
Free download. The on-device guardrail for your AI tools.
- ✓Guard unlimited AI tools (MCP)
- ✓Block dangerous file actions
- ✓Refuse credential access
- ✓Tamper-proof audit log
- ✓Offline local model
- —API / tool gateway (Stripe, GitHub, DB)
- —Browser-action guardrail
- —Custom agent / framework integration
Pro
Guardrails across every surface. Filesystem, APIs, browser, custom agents.
- ✓Everything in Lite
- ✓API and tool gateway covering Stripe, GitHub, databases, any MCP server
- ✓Browser-action guardrail (block "Pay Now")
- ✓Custom agent & framework integration (REST)
- ✓Web dashboard & evidence viewer
- ✓Smart intent detection (NLP)
Team
Fleet-wide policy for distributed, multi-agent systems.
- ✓Everything in Pro
- ✓Central policy management across agents & services
- ✓Fleet-wide audit dashboard
- ✓SSO & role-based access
- ✓Compliance exports
- ✓Dedicated support & SLA
DOWNLOAD
Get Praxis Lite, free
Free forever, the on-device edition. Choose your platform below.
All three are the Lite edition, free forever. Need API protection, browser guardrails, or fleet policy? See Pro & Team →
CONTACT
Interested in Pro or Team?
Tell us a bit about what you need and we'll get back to you.