Belfry Labs
Scans & reports
PR comments, Check Runs, executive reports.
Works with every major provider
OpenAIAnthropicGoogleMeta
MistralAWS BedrockAzureHuggingFace
The full platform
One control plane from inventory and evaluations through runtime protection, governance, and cost.
Runtime gateway
Fail-closed firewall, DLP, and agent controls on live traffic.
Red team & pen-test
Campaigns now, live Assessor with signed RoE.
Evaluations
Quality, safety, latency, and cost on your datasets.
Model inventory
Registry with expiry and degradation tracking.
Governance & SBOM
Scorecards of your system, evidence packs.
MCP mesh
Register, health-check, and govern MCP/A2A peers.
Cost & routing
Spend trends, cost-aware routing, optional budget caps.
Subscribe to the stage you’re in
Start with scan and PRs. Add runtime when traffic is live. Add pen-test and SSO when you need to prove it.
Pro
Scan and gate
Model Garden, static scan, GitHub App PR comments, SDK.
Pro+
Run in production
Runtime firewall, red team, fail-closed gateway, scorecards.
Enterprise
Pen-test and govern
Live Assessor, SBOM, SSO, SIEM, on-prem.
Try it first
Create an account, open Scans, and connect GitHub when you are ready.
10 complimentary scans
Connect the GitHub App from the Scans page when you want PR comments — no token paste.
1 architecture review
One shareable review. No live pen-test in the taste.
AI moves fast. Incidents move faster.
Recent headlines — and the Belfry Labs control that would have caught them.
2025
Copilot EchoLeak — zero-click prompt injection
Firewall
2025
Replit agent — deleted a production database
Kill switch
2025
DeepSeek — chats and API keys left public
DLP
2024
Air Canada — chatbot hallucinated a refund policy
Runtime