Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Kastra serves as the crucial authorization framework for AI systems, determining the permissions of agents, models, and tools prior to their execution. Positioned along the execution path of all interactions such as prompts, tool calls, shell commands, database operations, and API requests, it evaluates each action based on deterministic, attribute-driven policies, rendering decisions to allow, deny, redact, or escalate in less than a millisecond. In contrast to monitoring solutions that only track AI actions post-execution, Kastra proactively prevents unauthorized activities before they can impact any tool, API, database, or production environment. Its comprehensive control plane integrates a policy engine, edge decision-making capabilities, various integrations, and a tamper-proof evidence vault that securely signs each decision for auditing and replay purposes. Furthermore, with Kastra Edge, local enforcement is extended to developer environments, safeguarding coding agents such as Claude Code, Cursor, and Codex CLI from harmful commands, unauthorized data extraction, unsafe file modifications, and improper tool usage. This proactive approach to authorization not only enhances security but also ensures compliance and accountability in AI-driven processes.

Description

Norma consistently verifies AI-generated code against a set of governed rules, delivering the same outcome each time. This verification process occurs in two distinct environments: Livecheck, which assesses a specific file or code snippet upon request from editors such as Cursor, Claude Code, Windsurf, or VS Code, and Full Scan, which conducts a thorough audit of an entire GitHub or Bitbucket repository, identifying the technology stack and frameworks even in the absence of a configuration file, while prioritizing issues based on severity and providing the necessary context for remediation. Evaluations of the rules are conducted through static analysis, ensuring that results remain consistent across different runs. The rules are derived from SOLID design principles and specific conventions for various technology stacks, with the flexibility to disable those that are not applicable. The coverage of this system includes multiple programming languages and frameworks, such as JavaScript, TypeScript, Python, PHP, Java, Node, React, and Supabase. Additionally, the MCP server provides a range of functionalities, including link_repository, get_rulesets, get_rules_for_ruleset, live_check, get_open_issues, and register_applied_actions, all secured by OAuth and listed on the Official MCP Registry. This robust framework ensures that developers can maintain high code quality while adapting to various project requirements seamlessly.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Claude Code Yes 
Cursor Yes 
Codex CLI Yes 
Go Yes 
Google Sheets Yes 
JSON Yes 
Java Yes 
Lovable No 
Microsoft Excel Yes 
Model Context Protocol (MCP) No 
OpenAI Yes 
OpenClaw Yes 
Python Yes 
Replit No 
Rust Yes 
Slack Yes 
Swift Yes 
TypeScript Yes 
YAML Yes 

Integrations

Claude Code Yes 
Cursor Yes 
Codex CLI No 
Go No 
Google Sheets No 
JSON No 
Java No 
Lovable Yes 
Microsoft Excel No 
Model Context Protocol (MCP) Yes 
OpenAI No 
OpenClaw No 
Python No 
Replit Yes 
Rust No 
Slack No 
Swift No 
TypeScript No 
YAML No 

Pricing Details

$19.99 per month
Free Trial No 
Free Version Yes 

Pricing Details

$199/month
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac Yes 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Kastra

Founded

2026

Country

United States

Website

kastra.ai/

Vendor Details

Company Name

Quality Clouds

Founded

1986

Country

United Kingdom

Website

qualityclouds.ai/norma

Product Features

Product Features

Alternatives

Alternatives

Snort Reviews

Snort

Cisco