Policy as code
Readable policies with conditions, limits and tests. Simulate a change against past traffic before you deploy it.
Security & governance for AI agents
Your agents act.
GebSecure decides what they may do.
Authorize every agent action against policy, bring a human in when it matters, keep credentials out of agents' reach and record everything in a tamper-evident audit trail. Decisions return in milliseconds.
- Free plan, no card required
- Sign up with Google or GitHub
- Python & TypeScript SDKs
support:tickets.readALLOW14 mssupport:refunds.create · $50ALLOW17 mssupport:refunds.create · $300APPROVAL_REQUIRED28 mssupport:customers.deleteDENY6 ms
reason Explicitly denied by "support-never-deletes-customers"
risk 47 · delete action +32 · production +10 · new agent +5
risk 47 · delete action +32 · production +10 · new agent +5
Approval needed
support-bot wants to refund $300 on order A-18
ApproveReject
Bound to this exact request · single use · expires in 1 h
Works with
- OpenAI Agents SDK
- LangChain
- LangGraph
- CrewAI
- LlamaIndex
- AutoGen
- Semantic Kernel
- MCP
Platform
Everything between an agent's intent and its effect
One control point for every runtime: APIs, tools, MCP servers, browsers and databases.
Human approvals
Sensitive actions wait for a person. Approvals are bound to the exact request, used once and expire.
Secret-free agents
GebSecure executes the call and injects the credential itself. Agents never hold keys, and echoed secrets are redacted.
Injection & data-loss defence
Inbound content is scanned for prompt injection, outbound data for sensitive values, before either reaches its target.
Browser & computer use
Governed browser sessions: purchases, account changes and messages are recognised and routed through policy.
MCP gateway
Put any MCP server behind GebSecure. Every tool call is authorized, inspected and audited, with no client changes.
Tamper-evident audit
Every decision, approval and execution is recorded with its policy trace, risk and trace id, verifiable end to end.
Isolation & residency
Strict tenant isolation enforced in the database, and organizations pinned to their data region.
How it works
One pipeline for every action
The same eleven steps run for every agent action, on every runtime.
- Authenticateshort-lived agent tokens
- Identifyagent, owner, environment
- Authorizepolicy decision
- Assess riskexplainable score
- Inspectinjection & data loss
- Approvewhen policy says so
- Credentialsscoped, injected
- Executesandboxed
- Sanitizesecrets redacted
- Audittamper-evident
- Observetraces & metrics
Developers
A guard around any action, in a few lines
Ask before you act, or let GebSecure execute through a connection so your agent never sees the credential.
pip install gebsecurenpm install @gebsecure01/sdk- REST API with OpenAPI reference
- Client credentials or signed JWT auth for agents
from gebsecure import GebSecure
client = GebSecure(api_key="gsk_...")
result = client.guard("refunds:create", "stripe:charge/ch_123",
{"amount": 250, "currency": "USD"})
if result.allowed:
issue_refund()
else:
print("blocked:", result.decision.reason)import { GebSecure } from '@gebsecure01/sdk';
const gs = new GebSecure({ apiKey: process.env.GEBSECURE_API_KEY });
const { allowed, decision } = await gs.guard(
'refunds:create', 'stripe:charge/ch_123', { amount: 250 });
if (allowed) refund();
else if (decision.decision === 'APPROVAL_REQUIRED') notify(decision.approval?.url);Pricing
Start free. Scale with your agents.
Usage beyond the included amounts is billed per unit on paid plans, up to hard limits that protect you from runaway agents.
Free
$0
For trying GebSecure
- 3 active agents
- 10,000 decisions / month
- 1,000 executions & MCP calls
- 3 team members
- 7-day audit retention
Team
$99/ month
For teams shipping agents
- 25 active agents
- 250,000 decisions / month
- 25,000 executions & MCP calls
- 25 team members
- SIEM export & advanced detection
- 30-day audit retention
Business
$499/ month
For agents in production
- 200 active agents
- 2,000,000 decisions / month
- 250,000 executions & MCP calls
- Unlimited members, SSO & custom roles
- 1-year audit retention
- 24×7 support
Enterprise
Custom
For regulated organizations
- Dedicated or in-your-VPC deployment
- Contract terms & invoicing
- 7-year audit retention
- Data-region pinning
- Dedicated support
Security
Built like the control point it is
Your secrets stay encrypted
Envelope encryption with your cloud KMS. Secret values are write-only and never returned to agents or users.
Strong identity
Multi-factor authentication, single sign-on (OIDC and SAML), SCIM provisioning and Google or GitHub sign-in.
Least privilege everywhere
Scoped, short-lived tokens for agents; network egress limited to what each service needs.
Verified software supply chain
Every release is signed and verified before it runs, with build provenance and a software bill of materials.
Put a guard on your first agent today
Create an account in a minute. No card required.