Skip to main content

THE AGENT IS PROBABILISTIC. THE ACTION IS NOT.

CTRLRun stops AI agents from taking wrong, restricted, or malicious actions in your workflows.

Every action is checked against your rules before it runs. Allowed actions go through. Sensitive ones wait for a person. Forbidden ones are blocked.

Protect my agent GitHub

Open source · one line, any action

ONE EXAMPLE / THE MODEL HALLUCINATES AN AMOUNT

The model guesses.
CTRLRun does not.

The ticket saysrefund $500

The agent asks for$5,000

Without CTRLRun
  1. Nothing checks the amount
  2. The call goes through
  3. $4,500 too much
With CTRLRun
  1. Your rule checks the amount
  2. The call never leaves
  3. $0 wrongly paid

Works with agents you can and can’t modify.

WhatsApp, Slack, Teams, Claude Code, Cursor, Codex, ChatGPT, OpenAI Agents. Any AI agent you have. If it acts through your systems, it is checked.

How it works

HOW CTRLRUN WORKS

Let it run. Ask a human. Or stop it cold.

Interactive walkthrough: follow one agent action through every check →

FREE, PRO, ENTERPRISE

Free and open source: the boundary. Pro: the boundary, run for you. Enterprise: the boundary, shaped to you.