New: CoFounder 3.2 — 35 Packages, SOC2, Marketplace, Benchmarks, Adapters

The AI Guardrail Layer For Every Agent Framework

Production-ready guardrails for AI agents. PII detection, prompt injection blocking, 9 compliance frameworks, sandbox, streaming, benchmarks, and observability — wrapping Anthropic Agent SDK, OpenClaw, and any LLM provider. Like NeMo Guardrails, but TypeScript-first with 35 packages, CI/CD, MCP, and VS Code built in.

70%
Cost Savings
400K
Token Context
35
Packages
5min
To Production
$ npm install @aicofounder/guard @aicofounder/policies @aicofounder/agent-sdk
✓ Installed CoFounder 3.1 packages
import { ComplianceEnforcer, PresetRules } from '@aicofounder/compliance';
import { GuidelineManager, Conditions } from '@aicofounder/guidelines';
import { ContextOptimizer } from '@aicofounder/context-optimizer';
// HIPAA-compliant AI with built-in guardrails
const enforcer = new ComplianceEnforcer([PresetRules.hipaa()]);

64% Less Code

Same functionality, dramatically simpler code

LangChain14 lines
import { ChatOpenAI } from "@langchain/openai";
import { HumanMessage, SystemMessage } from "@langchain/core/messages";

const model = new ChatOpenAI({
  modelName: "gpt-4",
  temperature: 0.7,
});

const messages = [
  new SystemMessage("You are helpful."),
  new HumanMessage("Hello!"),
];

const response = await model.invoke(messages);
console.log(response.content);
CoFounder5 lines
import { createCoFounder } from '@aicofounder/core';

const cofounder = createCoFounder();

const response = await cofounder.chat('Hello!');
console.log(response.content);

Zero to Production in 5 Minutes

From first command to production deployment in under 5 minutes

01

Install

One command to get started. No complex setup.

npx create-aicofounder-app my-ai-app
~30 seconds
02

Build

Write clean, simple AI code with full TypeScript support.

const cofounder = createCoFounder();
const response = await cofounder.chat('Hello!');
~2 minutes
03

Test

Built-in testing framework for AI applications.

aiTest('works', async () => {
  await expect(response).toSemanticMatch('greeting');
});
~1 minute
04

Deploy

One-click deploy to Vercel, AWS, or any platform.

vercel deploy
~30 seconds
Total time:~5 minutes
New in CoFounder 3.1

35 Production-Ready Packages

The complete AI guardrail ecosystem — from core detection to enterprise compliance, CI/CD, streaming, sandbox, and VS Code extension

NEW

@aicofounder/agent-sdk

Wrap Anthropic Agent SDK with guardrails — PII, injection, compliance, cost

7 InterceptorsHIPAA AgentGDPR AgentFinancial Agent
const agent = createGuardedAgent({
  model: 'claude-sonnet-4-6',
  guards: {
    pii: { mode: 'redact' },
    injection: { sensitivity: 'high' },
    compliance: { frameworks: ['hipaa'] }
  }
});
NEW

@aicofounder/guard

Zero-dependency runtime guard — one import, any framework

Zero DepsClient ProxyPII/Injection25+ Models
import { createGuard } from '@aicofounder/guard';
const g = createGuard({ pii: 'redact', injection: 'block' });
const client = g.wrap(new Anthropic());
// All calls now guarded automatically
NEW

@aicofounder/policies

Declarative YAML policies with 9 compliance presets

HIPAAGDPRSECPCISOXFERPACCPA
const engine = PolicyEngine.fromPresets(['hipaa', 'gdpr']);
const result = engine.evaluate(text, {
  direction: 'input', model: 'claude-sonnet-4-6'
});
// { allowed: false, violations: [...] }
NEW

@aicofounder/ci

GitHub Action & CLI for AI security scanning in CI/CD

PR ScanningSARIF OutputKey DetectionCost Estimation
# .github/workflows/cofounder.yml
- uses: waymaker-ai/aicofounder-ci@v1
  with:
    fail-on: 'high'
    approved-models: 'claude-sonnet-4-6,gpt-4o'
    comment-on-pr: 'true'
NEW

@aicofounder/dashboard

AI observability — cost tracking, security alerts, compliance metrics

Real-time MetricsAnomaly DetectionPrometheus ExportHTTP API
const dashboard = new CoFounderDashboard({
  storage: new FileStorage('./aicofounder-data')
});
dashboard.collect(event);
await dashboard.serve({ port: 3456 });
NEW

@aicofounder/mcp-server

15+ MCP tools for Claude Desktop, Code, and Cursor

PII ScanInjection DetectCost EstimateCode Safety
// In Claude Desktop settings:
{ "mcpServers": { "cofounder": {
  "command": "npx",
  "args": ["@aicofounder/mcp-server"]
}}}
// Now use cofounder_scan_pii, cofounder_detect_injection...

@aicofounder/compliance

Automatic HIPAA, SEC, GDPR, CCPA compliance enforcement

PII DetectionAuto RedactionAudit TrailDisclaimers
const enforcer = new ComplianceEnforcer([
  PresetRules.hipaa(),
  PresetRules.gdpr()
]);
const result = await enforcer.enforce(request);

@aicofounder/guidelines

Dynamic behavioral control with context-aware rules

Priority RulesAnalyticsViolations8+ Presets
const manager = createGuidelineManager();
await manager.addGuideline(
  PresetGuidelines.noMedicalAdvice()
);
const matched = await manager.match(context);

@aicofounder/context-optimizer

Handle 400K+ token contexts with 70% cost savings

400K Tokens70% SavingsSmart ChunkingCaching
const optimizer = new ContextOptimizer({
  strategy: 'hybrid'
});
const result = await optimizer.optimize(context);
// 2.5M tokens → 400K tokens

Enterprise-Grade AI Framework

35 packages covering detection, compliance, sandbox, streaming, benchmarks, CI/CD, MCP, and VS Code integration

NEW

Agent SDK Guardrails

Wrap Anthropic Agent SDK with 7 composable interceptors. Pre-built HIPAA, GDPR, Financial, and Safe agent factories. Works with or without the SDK installed.

NEW

Zero-Dep Runtime Guard

One import, zero dependencies. Proxy-wraps Anthropic, OpenAI, and Google clients. PII redaction, injection blocking, cost tracking, and rate limiting in a single createGuard() call.

NEW

Declarative Policy Engine

9 compliance presets (HIPAA, GDPR, CCPA, SEC, PCI, FERPA, SOX, Safety, Enterprise) in YAML. Policy composition with strictest/first/last conflict resolution.

NEW

CI/CD Security Scanning

GitHub Action that scans PRs for hardcoded API keys, PII in prompts, injection vulnerabilities, unapproved models. SARIF output for GitHub Security tab.

NEW

Observability Dashboard

Real-time cost tracking, security incident monitoring, compliance scoring, performance metrics. Anomaly detection, Prometheus export, and HTTP API server.

NEW

15+ MCP Tools

Use CoFounder guardrails from Claude Desktop, Claude Code, or Cursor without writing code. PII scanning, injection detection, cost estimation, and code safety analysis via MCP.

NEW

PII Detection & Redaction

Detect and redact emails, SSNs, credit cards (with Luhn validation), phones, IPs, DOB, addresses, medical records, passports. 20+ patterns across all packages.

NEW

Prompt Injection Blocking

25+ attack patterns: direct injection, system prompt leaking, jailbreaks, role manipulation, delimiter injection, encoding attacks, multi-language attempts. Scoring with configurable sensitivity.

9 Compliance Frameworks

HIPAA (18 PHI identifiers), GDPR (data minimization, consent), SEC (disclaimers), PCI-DSS (card data), SOX (financial records), FERPA (student records), CCPA, and more.

Works With Everything

Wraps Anthropic Agent SDK, OpenClaw agents, LangChain, CrewAI. Use with Cursor, Windsurf, Claude Code, or any IDE. Complementary guardrail layer, not a replacement.

70% Cost Savings

Real-time cost tracking with pricing for 25+ models. Budget enforcement, model routing, caching, and prompt optimization. Projected monthly cost reports.

NEW

Sandboxed Execution

Run untrusted AI-generated code safely with @aicofounder/sandbox. Process isolation, resource limits, timeout enforcement, and output capture. Evaluate agent tool calls without risk.

NEW

Streaming Guards

Real-time guardrail evaluation on streaming LLM responses with @aicofounder/streaming. Token-by-token PII detection, injection scanning, and policy enforcement without buffering the full response.

NEW

Detection Benchmarks

Measure detection accuracy with @aicofounder/benchmark. 252 curated test cases across PII, injection, and toxicity. Per-category metrics, confusion matrices, and NeMo Guardrails comparison.

NEW

VS Code Extension

Inline guardrail warnings, PII highlighting, injection detection, and compliance checks directly in your editor. One-click redaction and policy violation quickfixes.

Like NeMo Guardrails, But Better

Everything NVIDIA NeMo Guardrails does — PII, injection, topical control, content safety — plus compliance frameworks, cost tracking, CI/CD, dashboard, sandbox, streaming, and MCP. TypeScript-first with 35 packages.

CoFounder 3.1 Ecosystem

The Complete Guardrail Stack

35 packages organized in 5 layers — use what you need, from a single guard import to the full enterprise stack

Core Layer

5 packages
guard

Zero-dep runtime guard with PII, injection, toxicity detection

agent-sdk

Anthropic Agent SDK guardrail interceptors

policies

Declarative YAML policy engine with 9 compliance presets

compliance

HIPAA, GDPR, SEC, CCPA enforcement with audit trails

guidelines

Dynamic behavioral control with context-aware rules

Integration Layer

5 packages
openclaw

OpenClaw agent framework guardrails

adapters

Multi-provider LLM adapters (Anthropic, OpenAI, Google)

colang

Colang dialogue flow integration

mcp-server

15+ MCP tools for Claude Desktop, Code, Cursor

mcp

Model Context Protocol client utilities

DevOps Layer

4 packages
ci

GitHub Action for AI security scanning in CI/CD

dashboard

Real-time observability, cost tracking, compliance scoring

benchmarkNEW

252 test cases measuring PII, injection, toxicity accuracy

sandboxNEW

Isolated execution of untrusted AI-generated code

Enterprise Layer

4 packages
multi-tenant

Tenant isolation, per-tenant policies, usage metering

soc2

SOC 2 compliance controls and evidence collection

marketplace

Community guardrail and policy marketplace

llm-detect

LLM-powered secondary classification for nuanced detection

Tools

4 packages
streamingNEW

Token-by-token guardrail evaluation on streaming responses

VS Code ExtensionNEW

Inline PII highlighting, injection warnings, policy quickfixes

cli

Command-line guardrail scanning and policy management

create-aicofounder-app

Project scaffolding with guardrails pre-configured

Loved by Developers

Join thousands of developers building production AI apps with CoFounder

CoFounder's cost tracking alone saved us $50k/month. The built-in testing gave us confidence to ship faster.
SC
Sarah Chen
VP of Engineering at TechCorp AI
Coming from LangChain, CoFounder felt like a breath of fresh air. We shipped in a quarter of the time.
MS
Maria Santos
Founder at DevTools Inc
The PII detection and audit logging made HIPAA compliance straightforward. We launched months ahead of schedule.
JM
Dr. James Miller
CTO at HealthAI
CoFounder's automatic fallbacks and circuit breakers mean our students never experience downtime.
AR
Alex Rodriguez
Head of Platform at EduLearn
The intelligent model routing automatically picks the cheapest model that meets our quality bar. Magic.
DK
David Kim
ML Lead at FinanceBot
Finally, a framework that treats testing as a first-class citizen. Our CI pipeline actually works now.
EW
Emily Watson
Staff Engineer at DataFlow
We evaluated every AI framework. CoFounder was the only one that had everything we needed out of the box.
MT
Michael Torres
Engineering Manager at CloudScale
The MCP server creation feature alone was worth switching. Standardized our entire AI integration layer.
JP
Jennifer Park
Principal Architect at Enterprise Co
90% less code is not an exaggeration. Our RAG pipeline went from 200 lines to 20.
CL
Chris Lee
Senior Developer at StartupXYZ
500+
Companies
50k+
npm Downloads/mo
10M+
API Calls/mo
4.9
Avg Rating

Ready to build your AI agent?

Start building production-ready AI agents in minutes with our comprehensive training and documentation. Need expert help? Waymaker offers implementation services.