THE AGENT IS PROBABILISTIC. THE ACTION IS NOT.
CTRLRun stops AI agents from taking wrong, restricted, or malicious actions in your workflows.
Every action is checked against your rules before it runs. Allowed actions go through. Sensitive ones wait for a person. Forbidden ones are blocked.
Open source · one line, any action
ONE EXAMPLE / THE MODEL HALLUCINATES AN AMOUNT
The model guesses.
CTRLRun does not.
The ticket saysrefund $500
The agent asks for$5,000
- Nothing checks the amount
- The call goes through
- $4,500 too much
- Your rule checks the amount
- The call never leaves
- $0 wrongly paid
Works with agents you can and can’t modify.
WhatsApp, Slack, Teams, Claude Code, Cursor, Codex, ChatGPT, OpenAI Agents. Any AI agent you have. If it acts through your systems, it is checked.
How it worksHOW CTRLRUN WORKS
Let it run. Ask a human. Or stop it cold.
CTRLRun stops an agent from taking an action your rules do not allow. Every action that leaves your agents, tools and workflows is normalized into one action, decided against your policy, held for a person where you require it, reserved so it cannot run twice, executed, resolved and recorded. An action with no rule is blocked, arguments changed after sign-off void the approval, and an outcome nobody knows is never retried on a guess.
Interactive walkthrough: follow one agent action through every check →
FREE, PRO, ENTERPRISE
Free and open source: the boundary. Pro: the boundary, run for you. Enterprise: the boundary, shaped to you.
ctrlrun Open Source
Free. Run it yourself.
The boundary itself, at no cost. No account, no card, no call with us. Every rule that decides is code you can read, and every action leaves a receipt you keep. Free to use and free to change, under the Apache-2.0 licence.
Who does the work Your team, on your machines.
Install itctrlrun Pro
Integrate, analyze, protect. One dashboard.
Connect your agents and workflows and see what each connection covers. Search every action, decision and outcome across your agents. Manage policies and approvals from one place, test a rule in observe mode, then turn enforcement on. Built on the open-source foundation, run by us.
Who does the work Your team, on our dashboard.
ctrlrun Enterprise
The same product, shaped to your company.
Everything in Pro, with CTRLRun engineers who design, integrate and maintain the controls your business needs: custom policies and approval chains, connectors to your internal systems, your deployment options, the reports you ask for. Scoped to your requirements, delivered with your team.
Who does the work Our engineers, with your team.