AI Defense Stack

Agent & MCP security

NeuralTrust: agent gateway and runtime security platform

NeuralTrust is an agent gateway and runtime security platform from NeuralTrust. It is open source under the Apache-2.0 license and is offered as: SaaS, Self-hosted, On-prem.

  • Last reviewed
Visit NeuralTrust (opens in a new tab) Documentation (opens in a new tab) Source code (opens in a new tab)
Open sourceApache-2.0 Freemium Layer 7: Agent and tool access

Best for

Teams that want a gateway in front of agents, models and MCP tools with per-tool access and audit, and that can start on a free plan or self-host the gateway

Consider instead if

  • You want an open-source MCP gateway focused on policy rules over tool call sequences. See Invariant Guardrails.
  • You want a managed proxy that sits only in front of MCP servers. See Lasso MCP Gateway.

What NeuralTrust does

NeuralTrust is a company that sells three products from one control plane: TrustGate, an LLM, MCP and agent-to-agent gateway, TrustGuard for agent runtime security, and TrustTest for AI red teaming. The gateway page lists per-agent and per-tool role-based access, forwarding of the end-user identity, inline prompt inspection with PII redaction, and cryptographic audit trails. Deployment can be SaaS, hybrid or self-hosted. The TrustGate gateway is also published as an Apache-2.0 repository, and we did not check whether TrustGuard or TrustTest are. The pricing page lists a free plan, a $49 a month plan and custom Enterprise rates.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
NeuralTrust Source, checked October 21, 2026: neuraltrust.ai (opens in a new tab)
Status
Active Source, checked October 21, 2026: api.github.com (opens in a new tab)
Open source
Yes: Apache-2.0 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Repository
github.com Source, checked October 21, 2026: api.github.com (opens in a new tab)
GitHub stars
15 as of October 21, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Latest push
October 21, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Latest release
October 21, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Deployment
SaaS, Self-hosted, On-prem Source, checked October 21, 2026: neuraltrust.ai (opens in a new tab)
Pricing model
Freemium: Free plan at $0 per month; Standard at $49 per month with usage credit included; Enterprise is contact sales with custom rates and private deployment. (as listed on October 21, 2026; check the vendor for current pricing) Source, checked October 21, 2026: neuraltrust.ai (opens in a new tab)
Website
neuraltrust.ai Source, checked October 21, 2026: neuraltrust.ai (opens in a new tab)
Documentation
docs.neuraltrust.ai Source, checked October 21, 2026: docs.neuraltrust.ai (opens in a new tab)
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
Not documented in the sources we checked
Attestations or disclosure
Not documented in the sources we checked

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where NeuralTrust fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that NeuralTrust covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L7 Agent access Agent and tool access Primary Limit which tools, MCP servers, data and credentials an agent can use, and require approval for risky actions. Follows its category, Agent & MCP security
L6 Runtime Runtime guardrails Also covers Documents inline prompt inspection that detects jailbreaks, injections and policy violations. Inline prompt inspection that detects jailbreaks, injections and policy violations
L4 Testing Testing and red teaming Also covers Documents TrustTest, which covers prompt injection, jailbreaks, data extraction and multi-turn agentic attacks. TrustTest runs adversarial tests for prompt injection, jailbreaks, data extraction and multi-turn agentic attacks

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to NeuralTrust, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM01 Prompt Injection Inspects prompts inline for injections and jailbreaks, and tests agents for them with TrustTest. Inline prompt inspection that detects jailbreaks, injections and policy violations; TrustTest runs adversarial tests for prompt injection, jailbreaks, data extraction and multi-turn agentic attacks
LLM06 Excessive Agency Scopes tool access per agent and per user and records every tool call through the gateway. MCP gateway gives people access to tools with access scoped per user and every call on record; Per-agent and per-tool role-based access, with read or read and write permissions

Not mapped in our analysis: LLM02, LLM05, LLM07. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in Agent & MCP security, ranked within the category by Coverage Score.

Cisco DefenseClaw

Cisco

Open sourceApache-2.0
  • CLI
  • Self-hosted

Scans skills and MCP servers, inspects agent tool calls and keeps an audit trail around AI coding agents.

Best for: Security teams that want scanning, guardrails and an audit trail around the coding agents developers already run, starting in observe mode before anything is blocked

Coverage Score 76 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

Docker MCP Gateway

Docker

Open sourceMIT
  • CLI
  • Self-hosted

Proxies AI clients to MCP servers it runs as isolated Docker containers, with tool filters and call logs.

Best for: Developers and platform teams that already use Docker and want MCP servers to run in containers behind one gateway with per-server tool selection

Coverage Score 72 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

agentgateway

agentgateway (a Series of LF Projects, LLC)

Open sourceApache-2.0
  • CLI
  • Self-hosted
  • Cloud-native

Open-source proxy that applies auth, CEL policy and guardrails to LLM, MCP and agent-to-agent traffic.

Best for: Platform teams that want one open-source gateway in front of MCP servers and LLM providers, with token validation, CEL rules per MCP method and pluggable guardrails

Coverage Score 69 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

NeuralTrust FAQ

Is NeuralTrust open source?

In part. The TrustGate gateway repository is Apache-2.0 on GitHub. We did not check whether TrustGuard or TrustTest are open source.

Does NeuralTrust have a free plan?

Yes. Its pricing page lists a Free plan at $0 per month, a Standard plan at $49 per month and Enterprise with custom rates, as listed on 2026-10-21.

How can NeuralTrust be deployed?

The gateway page lists SaaS, a hybrid setup with a private data plane, and an on-premises or air-gapped option.

Key facts you can cite

We have no commercial relationship with NeuralTrust.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.