Community & Licensing
Belay is open-core, published by Secblok Pty Ltd. The full agent-defense product you run on your own machine is free and open source; a separate commercial license covers uses the open-source license can't allow and the proprietary Enterprise components.
The open-core model
- Community edition — free and open source. Licensed under the GNU AGPL-3.0-or-later. This is the complete, self-contained product: it detects installed AI coding agents, gates them at the tool-call boundary, blocks dangerous actions, escalates ambiguous ones to a human (in the terminal, the desktop app, or a chat channel), explains every verdict in plain English, scans code before you install it, and keeps a tamper-evident local audit trail. You can use, study, modify, and redistribute it under the terms of the AGPL. The source lives at github.com/SECBLOK/belay.
- Commercial license — for AGPL-incompatible use. A separate commercial license is available if you cannot comply with the AGPL — for example, embedding Belay in a closed-source product, or offering it as a hosted service without releasing your corresponding source. The commercial license also covers the proprietary Enterprise components (fleet management, multi-tenancy, SSO/SCIM, curated feed, compliance reporting, and more). Contact hello@secblok.io.
Both tracks are possible because Secblok is the sole copyright steward of Belay. Dual licensing is what lets the same codebase be free under the AGPL and available under commercial terms.
Contributing
Contributions are welcome. To keep the open-core dual-licensing valid, contributions require:
- a signed Contributor License Agreement (CLA), and
- a DCO (Developer Certificate of Origin)
Signed-off-byline on your commits.
See CONTRIBUTING.md and CLA.md in the open-source repository
for the details.
Privacy: local-first, no phone-home
Belay is local-first and does not phone home by default. Your files,
commands, prompts, secrets, and audit log stay on your machine, under ~/.belay. See the
Privacy page for exactly what the software does and does not transmit.
Community vs Enterprise
The Community column is the free, open-source AGPL-3.0 build. The Enterprise column adds the commercially licensed management, identity, and compliance layer — it does not remove anything from Community.
| Capability | Community (free) | Enterprise (commercial) |
|---|---|---|
Runtime gating at the tool-call boundary (PreToolUse/PostToolUse hooks, hook + gate) | ✅ | ✅ |
MCP stdio proxy (mcp-proxy, fail-closed gating of tools/call) | ✅ | ✅ |
| Deterministic rule catalog (secrets, egress, destructive, RCE, supply-chain, persistence, priv-esc, recon, config-tamper; arm→sink + lethal-trifecta correlation) | ✅ | ✅ |
| Explain & Advise (curated per-rule explanations; optional BYOK AI explainer, advisory only) | ✅ | ✅ |
--observe dry-run mode | ✅ | ✅ |
| Human-in-the-loop Allow/Deny (browser + terminal; timeout = deny) | ✅ | ✅ |
| Two-way approvals over chat (Telegram, Discord, WhatsApp, Matrix, Mattermost, Slack; notify-only ntfy/Teams/WeCom/webhook) | ✅ | ✅ |
Local backend (serve: local JSON/SSE API on 127.0.0.1:8787) | ✅ | ✅ |
| Desktop app (Tauri tray app; privacy-safe notifications; signed auto-updater) | ✅ | ✅ |
Static pre-install scanner (scan; patterns/AST/taint/YARA/OSV; SARIF 2.1.0; optional --llm cascade) | ✅ | ✅ |
Tamper-evidence (hash-chained audit log; evidence build / verify; honeypot canaries) | ✅ | ✅ |
| Native firewall + bundled vuln DB (pure Rust, no external tools; KEV + EPSS badges; egress enrichment) | ✅ (baseline seed) | ✅ (+ curated feed) |
| Standards alignment (OWASP ASI Top 10, OWASP LLM Top 10, MITRE ATLAS) | ✅ | ✅ |
| Fleet management (multi-host central console) | — | ✅ |
| Organizations / multi-tenancy | — | ✅ |
| Device management & enrollment | — | ✅ |
| Remote agent command dispatch | — | ✅ |
| Cross-device correlation | — | ✅ |
| SSO (OIDC) + SCIM provisioning | — | ✅ |
| Hosted / curated advisory feed (EPSS + CISA KEV enrichment) | — | ✅ |
| Audit push / central ingest | — | ✅ |
| Compliance reporting | — | 🔜 Planned |
Pricing
| Edition | Price | How to get it |
|---|---|---|
| Community | Free / $0 — open source (AGPL-3.0) | Install with curl -fsSL https://dl.belay.secblok.io/install.sh | bash, or build from the open-source repository. Free forever. |
| Enterprise | Contact sales | Email hello@secblok.io to scope a deployment and discuss terms. |
Community is free forever. For Enterprise, we tailor the arrangement to your fleet size and requirements — talk to us.