Oso

Oso is an authorization and agent security platform for engineering, security, and IT teams. It addresses two related problems: building and maintaining application permissions, and gaining visibility and control over AI agents running across an organization. For agents, it provides discovery of sanctioned and unsanctioned tools, monitoring of prompts, tool calls, and responses, detection of policy violations and sensitive data exposure, policy enforcement, and complete audit logs.

For applications, teams define authorization logic with the Polar DSL, supporting RBAC, ReBAC, ABAC, and AnyBAC models, and integrate through SDKs with inline policy testing, logging, and debugging. Authorization data can be synced to Oso or kept in your own database. Oso for Agents includes an edge proxy for approved traffic, default and custom alert triggers, PII and API key detection, MCP and CLI tool inventory, and Slack and SIEM integrations.

Oso for Agents is packaged in Developer, Growth, and Enterprise editions, priced per user (humans invoking agents), with a free Developer tier and custom Enterprise terms. Enterprise adds features such as IP leakage detection, custom data retention and residency, cloud or on-prem deployment, EDR-based agent inventory, and 24/7 support. Volume and annual pricing are available by request.