New AI-TC is now open source Read more
AI Traffic Control

Guardrails for every agent.

AI Traffic Control (AI-TC) keeps regulated data on your machine, scanning every prompt and tool call before it runs. PCI, PHI, and PII never reach a model or a third party.

View on GitHub See editions
ai-tc data: protected
  • readsrc/api/webhooks.tsallow
  • detectpci/card-numberprotected
  • detectphi/patient-recordprotected
  • egressapi.stripe.comallow
  • egress169.254.169.254block

AI-TC enforces at every layer of the agent harness, from orchestration to data access.

Why the harness matters

Enforcement runs inline, every time.

Every prompt and tool call clears the rule set before it completes. The rules pull from the same detection library that ships in the open, updated without a redeploy.

Inline, before every call Rules update without a redeploy
02

Capabilities.

  1. 01

    Sensitive-data detection

    PCI, PHI, PII, and secrets are caught before they reach a model or leave the machine.

  2. 02

    Local enforcement

    AI-TC runs on the machine where the agent runs. Regulated data never phones home, and the audit log stays with you.

  3. 03

    Warn, redact, or block

    Every prompt and tool call gets an inline decision. Redaction rewrites the sensitive value; block stops the call.

  4. 04

    Multi-agent

    One engine in front of every agent you run.

03

Community and Enterprise.

AI-TC runs the same on every machine. The community edition is free and installed locally; the enterprise edition adds org-wide control, a curated detection feed, and compliance reporting.

See the editions comparison

AI-TC ships alongside a growing family of open-source security tools.

See the family

Put AI-TC in front of every agent.

Try AI-TC
or