Packaging
AI-ASSISTED ENGINEERING GOVERNANCE
FROM PILOT TO ROLLOUT.
START WITH ONE WORKSPACE. SCALE ACROSS YOUR AI WORKFORCE.
Give employees, external developers, and autonomous agents Claude, Cursor, shell, and curated MCP servers inside governed workspaces with policy on every tool call and audit on every action.
Self-serve for teams. Security-led rollout for Enterprise. Multi-tenant packaging for MSSPs and vCISOs.
1
Free governed workspace to prove the flow.
4
Gateway decisions: allow, deny, redact, step-up.
90d
Readiness program for security buyers.
MSSP
Multi-tenant packaging for service providers.
Browser-isolated
Every governed workspace
MCP policy gateway
Allow · deny · redact · step-up
Signed audit trail
Every AI-assisted action
SOC 2 / ISO 27001
Audit-ready evidence export
Free Pilot
One isolated governed workspace so the team can see a blocked action and audit chain before buying.
- 1 governed workspace
- Claude, Cursor, shell, and sample MCP policy set
- Sample repo or sandbox repo connection
- 7-day audit log retention
- Core MCP allow / deny policy templates
- Prompt-to-action audit chain preview
- Community support
Engineering Team
For one engineering team giving employees and external developers governed AI access to real repos.
- Up to 5 active governed workspaces
- GitHub repo and branch scoping
- MCP gateway policy enforcement
- 30-day signed audit log retention
- Slack, Discord, Teams, and email alerts
- Device-bound operator enrollment
- Basic SOC 2 / ISO 27001 evidence export
- Email support
Governance Team
For platform and security teams standardizing AI access across multiple repos and workflows.
- Up to 25 active governed workspaces
- SSO via Google, GitHub, Okta, or Entra ID
- SIEM export and webhook routing
- Custom policy templates for repos, MCP, and cloud
- 90-day signed audit log retention
- Trust Graph baseline and blast-radius view
- Compliance evidence packs for SOC 2 and ISO 27001
- Priority support
Enterprise Governance
For regulated orgs rolling out governed AI-assisted engineering with security and compliance ownership.
- Up to 250 active governed workspaces
- SAML / OIDC SSO and SCIM provisioning
- OPA policy bundle integration
- Splunk, Sentinel, Datadog, and PagerDuty integrations
- 1-year audit retention with longer retention available
- SOC 2, ISO 27001, EU AI Act evidence mapping
- Custom data residency and dedicated Cloudflare workspace
- Quarterly security review
- 99.9% SLA target
MSSP / Vendor Tier
For MSSPs, vCISOs, and AI consultancies governing AI-assisted engineering across many customer tenants.
- Multi-tenant customer management
- Per-customer policy packs and evidence exports
- White-label customer portal option
- Bulk workspace pricing
- Partner revenue-share program
- Co-branded AI engineering governance assessments
- Dedicated partner success channel
- Monthly threat and product briefing
- Custom onboarding playbooks
Buyer comparison
WHAT SHOULD OWN AI EXECUTION ACCESS?
IDE controls help inside one tool. Scanners help after code changes. OpenSyber owns the runtime layer between operators, agents, MCP tools, repos, and infrastructure.
| Capability | OpenSyber | IDE-native controls | DIY bastion | SAST / CI scanners |
|---|---|---|---|---|
| Browser-isolated governed workspace | ||||
| MCP gateway: allow, deny, redact, step-up | ||||
| Works across Claude, Cursor, VS Code, Windsurf, and raw MCP | ||||
| Device-bound operator identity | ||||
| Prompt-to-tool-to-repo audit chain | ||||
| GitHub scoped credential bridge | ||||
| SIEM and compliance evidence export | custom | |||
| MSSP multi-tenant packaging | custom | |||
| Entry path | Free pilot | Enterprise seat | Internal project | Repo scan |
MSSPS, VCISOS, AND AI CONSULTANCIES
Standardize AI-assisted engineering governance across many customer tenants. Per-customer workspaces, policy packs, evidence exports, and a white-label option.
TokenForge is included from the Governance Team tier.
Device-bound session security for contractors and reviewers. Learn about TokenForge →
Start with a free pilot workspace. Upgrade when you connect real repos or need SSO, SIEM, and evidence exports.