Open-source, self-hostable general-purpose AI agent that plans tasks and runs a terminal, browser and files inside a Docker sandbox.
Certiv
Endpoint security for AI agents: finds agents on each device and checks every proposed action against company policy before it runs.
What is Certiv?
Certiv is an AI agent assurance layer that runs on employee endpoints. A component called Scout is installed once on each device and discovers which AI agents and models are in use, including agents the company has not approved. It intercepts each action an agent proposes, outside the agent itself, and a policy engine named Sage reads the action in the context of the user's task and recent steps before returning a response: allow and record, redact, pause for approval, steer the agent to another approach, or block. Policies are written once, can be tested on recorded sessions, run in audit mode first, and be tuned by group. Certiv also blocks secret leaks, credential reads and destructive commands, keeps a decision log with reasoning that exports to PDF or CSV, and maps managed policies to OWASP, MITRE ATT&CK and NIST AI RMF entries. Pricing is not published on the site.
Use cases
- Discover unsanctioned AI agents on laptops
- Block risky agent actions before they run
- Redact secrets from agent requests
- Audit agent sessions and policy decisions
- Track token usage and spend per agent
- Detect prompt injection and credential misuse
- Map agent controls to security frameworks
Who it's for
Why use Certiv
- See which AI agents and models are running on company devices, including ones nobody approved.
- Stop a risky action before it executes rather than reading about it in a log afterward.
- One policy set applies across supported agents and models, so rules do not depend on a single vendor.
- Audit mode lets security teams watch what a policy would do before they turn on enforcement.
- Decision logs with reasoning give compliance teams evidence for reviews.
Certiv features
- Agent discovery across devices, including agents with no hooks, tied to the app that made each model call
- Endpoint inventory of agents, MCP servers, sessions and models in use
- Pre-execution enforcement with five responses: redact, pause, allow and record, steer, block
- Context-aware checks that read the user's last message and recent tool calls
- Managed and custom policies, including rules described in plain language
- Policy tester that replays a recorded session against draft policies
- Secret redaction and blocks on credential reads, exfiltration and permanent deletes
- Session timeline and decision log with PDF or CSV export
- Audit mode that records what a policy would do without enforcing it
- Managed policies mapped to OWASP, MITRE ATT&CK and NIST AI RMF
- Token spend visibility and budgets (Certiv Cost, in public preview)
Certiv integrations
How to get started with Certiv
- Deploy Scout to the fleet through device-management tools such as Jamf Pro or Microsoft Intune.
- Scout discovers agents and models on each device and builds an inventory without changing the agents.
- Each action an agent proposes is intercepted and sent for a policy decision.
- Sage judges the action against the task, recent steps and your policies, then returns allow, redact, pause, steer or block.
- Review sessions, decisions and spend in dashboards, and tune policies by group.
Certiv limitations
- Several capabilities are marked Preview, including tools and skills inventory, local model listing, spend budgets, signed decision receipts and Privacy Mode
- MCP server listing is read from Claude Code and Claude Desktop configurations
- No published pricing
Certiv pricing
We couldn't confirm pricing on the official site. Check certiv.ai for current prices.
Prices can change and may vary by country or exclude tax. Check the official pricing page.
Certiv alternatives
The main Certiv alternatives listed on Debuly are Zenity, Credo AI, Fiddler AI, Wonderful, RailCall and Agent Barn. The table compares pricing and platforms; order is A–Z.
| Tool | Pricing | Starting price | Platforms |
|---|---|---|---|
| Certiv | Pricing unknown | — | macOS |
| Agent Barn | Open source | $20/mo | Web, Slack, Microsoft Teams, Telegram |
| Credo AI | Contact sales | — | Web, API |
| Fiddler AI | Freemium | $0, usage-based | Web, API, Self-hosted |
| RailCall | Freemium | — | CLI, Web, Self-hosted |
| Wonderful | Contact sales | — | CLI |
| Zenity | Contact sales | — | — |

Agent Barn
Open-source control plane for running AI agents in Slack, Teams and Telegram, with templates, skills, cost tracking and self-hosting.
Open sourceVisit Agent Barn (official site)
Credo AI
Enterprise AI governance platform for discovering AI systems, assessing risk, enforcing policy and producing compliance evidence.
Contact salesVisit Credo AI (official site)
Fiddler AI
Control plane for enterprise AI agents: observability, evaluations, inline guardrails and governance for agentic and predictive models.
FreemiumVisit Fiddler AI (official site)RailCall
Local-first developer kit that runs governed AI workflows on your machine, holds every external write for approval and signs a receipt.
FreemiumVisit RailCall (official site)
Wonderful
Enterprise AI operating layer with agents, an AI gateway and AI-native business software, governed from one place.
Contact salesVisit Wonderful (official site)
Zenity
Enterprise platform that inventories AI agents, checks each action against policy at runtime, and detects threats across SaaS, cloud and endpoints.
Contact salesVisit Zenity (official site)
Certiv FAQ
How much does Certiv cost?
Certiv does not list prices on its site. Contact the vendor for a quote.
Does Certiv work with any AI agent or model?
The vendor says it works with models and providers such as OpenAI, Anthropic, Google, open-source and custom models, and monitors IDE copilots, browser agents and custom apps. Check the capabilities page for which agents are supported for interception.
How is Certiv deployed?
It is installed as a lightweight endpoint agent called Scout, which can be rolled out through device-management tools such as Jamf Pro and Microsoft Intune. No network reconfiguration or proxy setup is required.
What happens when Certiv sees a risky action?
It responds with one of five actions: redact a secret, pause for approval, allow and record, steer the agent to a different approach, or block the action.
Who is Certiv for?
Security, IT, compliance and engineering teams that need visibility into, and control over, the AI agents employees run on their devices.
Does Certiv have a free plan?
No free plan is listed on the Certiv site, and pricing is not published.
Sources & verification
Facts on this page come from the official sources below, each with the date we read it. Written by Debuly; the vendor did not review this page.
| Source | Type | Accessed |
|---|---|---|
| certiv.ai/ | official | |
| certiv.ai/capabilities/ | official | |
| certiv.ai/product/ | official | |
| certiv.ai/blog/token-spend-signal-rogue-agent/ | official |
Image credits
- Logo: from certiv.ai · fetched · Vendor trademark, used only to identify the product; removed on request
- Cover: none collected yet, so a generated tile is shown.
Spot an error? Report an issue with this listing. We also remove a logo or image on the owner's request.


