Praxel.
Runtime control plane

Govern every agent.
Signed by default.

Praxel is the vendor-neutral runtime control plane for AI agents. Wrap any agent in three lines. Get cryptographically signed audit logs, real-time policy enforcement, and compliance evidence for SOC 2, HIPAA, and EU AI Act — by default.

Join the waitlist — early access for design partners.

before · agent.pyno audit trail
from anthropic import Anthropic

client = Anthropic()
resp = client.messages.create(
  model="claude-sonnet-4-5",
  tools=tools,
)
after · praxel wrappedpolicy active
from praxel import Praxel

client = Anthropic()
agent = Praxel.wrap(client)
# → allow · signed:ed25519:b1e4…c09a

How it works

Three steps. Zero infrastructure changes.

from praxel import Praxelagent = Praxel.wrap(client)

Wrap

Three lines. Any agent, any provider.

Policy decisionenforced

Allow safe actions, approve high-value ones, deny violations.

sub-50ms

Enforce

Every call checked against policy. Sub-50ms.

Signed evidence

Each action: signed, timestamped, verifiable.

Prove

Every decision signed. Auditor-ready by default.

Architecture
Vendor-neutral by structure
Cryptography
Ed25519 signed events
Policy evaluation
Sub-50ms
License
MIT open source
The stakes

Testing is a snapshot.
Production is a stream.

Three scenarios that should keep your CISO awake

Composite scenarios drawn from publicly reported AI incidents (2024–2026). Praxel enforcement would have logged, blocked, or escalated each.

Incident · 02:14 UTCfinops
$50,000
wire authorized by agent

A scheduling agent chained lookup_vendor and send_ach and wired funds to a spoofed payee. No human. No audit trail that survived rotation.

ExposureSOX 404 · Reg E
Disclosure · T+11 dayshealthcare
14,200
PHI records leaked

A Claude triage agent echoed patient records into a third-party summarizer. Screenshots surfaced in a training set. HHS opened a breach investigation in two weeks.

ExposureHIPAA · HHS OCR
Runaway · 38 minplatform
204/min
stripe calls in retry loop

A three-agent workflow hit a retry loop: planner → executor → search. By the time rate limits tripped, the team had burned $11k and a customer circuit breaker.

ExposureSOC 2 CC7.2

86% of production AI agents go live without formal security review

Source: Pragatix AI Agent Security Report, 2026

€35M or 7% EU AI Act max penalty for prohibited practices · enforcement August 2026

Source: EU AI Act Article 99

35% of executives report they cannot stop a rogue agent in real time

Source: Pragatix AI Agent Security Report, 2026

Why Praxel

Neutral by design

Praxel works across every model provider and isn't tied to any single lab's roadmap. One governance layer for your whole agent stack — Anthropic, OpenAI, or custom — so you're never locked in.

Vendor-neutral by design

MIT open source · vendor-neutral by structure. No frontier lab owns the roadmap.

Cryptographic evidence

Ed25519 signed events, individually verifiable, cryptographically timestamped. Tamper-evident by construction.

Runtime, not CI

Every call, every tool, every retry. Not a quarterly snapshot run in your eval pipeline.

Pricing plan

Start free. Stay free.

The SDK is MIT, forever. Pay us when you need hosted distribution, BAA, or signed forensic export.

OSSMIT · forever
$0
Self-host · unlimited agents

Everything an independent dev needs to govern production agents.

  • Full SDK · Python
  • Policy engine · policy-as-code, version-controlled
  • Local signed ledger
  • Community Slack
TeamMost popular
$1,500/mo
Per 5 agents · $250 each after

For teams running agents in production across 2+ providers.

  • Everything in OSS
  • Hosted control plane · dashboard
  • Slack · PagerDuty approvals
  • SOC 2 + HIPAA evidence export
  • 7-day signed ledger retention
Join waitlist
EnterpriseAnnual · BAA
$75k/yr
From · volume + SLA tiers

Self-hosted, SSO, BAA, dedicated compliance engineer.

  • Everything in Team
  • Self-hosted in your VPC
  • Dedicated compliance engineer
  • Signed BAA · DPA · custom SCCs
  • Unlimited retention · WORM storage
Common questions

Skeptical? Good. So are we.

The ones we get most from platform leads, CISOs, and the senior engineer in the room with arms crossed.

What's the latency cost of wrapping every call?

Sub-50ms policy evaluation in-process. No sidecar, no proxy hop.

How is this different from Promptfoo?

Promptfoo tests agents in CI before they ship. Praxel governs them in production, on every live call. Testing is a snapshot; production is a stream. And Praxel stays neutral across providers.

Does this work with my existing orchestrator?

Yes. We wrap at the model-client layer, below LangChain, LlamaIndex, CrewAI, or your own orchestration. If it eventually calls an HTTP model endpoint, Praxel sees it.

Where do audit logs live?

Wherever you want. Local filesystem, your S3 bucket, Snowflake, BigQuery, or a WORM archive. We never see your events unless you explicitly enable the hosted plane.

What happens if Praxel goes down?

The SDK is in-process. There is no SaaS dependency in the critical path unless you opt into hosted approvals. Policies are cached locally and evaluated offline.

Ready to ship?

Govern the stream.
Not the snapshot.

Install the SDK in three lines. Sign every call. Hand your auditor signed event exports instead of screenshots.