Secure every tool call. Start free.
Open source guardrails with zero limits on tool calls. Upgrade when you need signed decisions, team sync, or compliance.
Open Source
Self-hosted. Self-sovereign. Forever free.
No credit card. No limits on tool calls.
- Pre-action guardrails on every tool call
- Local passport (OAP v1.0 compliant)
- 21 policy packs included
- 7 frameworks supported
- Local bash evaluator (zero network)
- File-based audit log
- File-based kill switch
- Community support (GitHub)
Pro
For teams shipping agents to production.
Free while in beta. Lock in early access.
- Everything in Open Source, plus:
- Hosted passports (cloud registry)
- Global kill switch (<30s propagation)
- Ed25519-signed decisions (verifiable)
- Web dashboard with real-time activity
- Team sync (shared passports)
- Instant policy updates (no restart)
- Decision token caching (1hr TTL)
- ~65ms p50 latency (API mode)
- Email support
Enterprise
For regulated industries and large deployments.
SOX, HIPAA, EU AI Act compliance packages.
- Everything in Pro, plus:
- Self-hosted API option (on-prem)
- Custom policy packs
- Bring-your-own signing keys
- SSO / SAML integration
- Dedicated support & SLA
- Compliance audit packages
- Custom assurance levels
- Volume pricing
Frequently Asked Questions
Is APort really free?
Yes. The open-source tier is free forever with no limits on tool calls. You self-host the passport and evaluator. The /api/verify endpoint is also free to call. Pro features (signed decisions, dashboard, team sync) are free during beta.
What happens after the beta?
Open source stays free forever. Pro will have usage-based pricing, but beta users get locked-in early access rates. We'll give 90 days notice before any pricing changes.
Can I use my own evaluator?
Yes. The OAP specification is open. You can implement your own evaluator that reads OAP passports and returns OAP decisions. The trade-off: you lose signed decisions, the dashboard, and instant global suspend unless you implement those yourself.
What's the difference between local and API evaluation?
Local evaluation runs a bash script on your machine — zero network calls, ~300ms latency, but only supports a subset of policy rules. API evaluation runs the full OAP engine at ~65ms p50 latency with JSON Schema validation, assurance levels, regions, and signed decisions.
How does the kill switch work?
Free tier: edit your passport JSON file to set status to 'suspended'. Hosted: log into aport.io, click Suspend — every agent using that passport worldwide denies within 30 seconds. No agent restart needed.
Do I need a hosted passport for compliance?
For SOX, HIPAA, or EU AI Act, you need signed decisions and a verifiable audit trail. That requires either the hosted Pro tier or a self-hosted Enterprise deployment with your own Ed25519 signing keys.
Pro is free during beta.
40+ teams already have early access. Beta users get locked-in pricing when we launch.