Governance
at the execution
layer.
Qortara is a family of agent governance products. Start with the open-source SDK for intra-org runtime enforcement, or engage Qortara Cloud Governance for hosted cross-org policy, trust, and evidence.
[01:23:45] agent_42 policy_eval policy=data_egress decision=ALLOW 12ms
[01:23:46] agent_17 saga_step action=db_write status=PENDING_VERIFY
[01:23:46] agent_17 saga_step action=db_write status=VERIFIED 47ms
[01:23:47] agent_89 trust_lookup org=acme.io score=0.94 fresh=12m
[01:23:47] compliance_scan framework=SOC2 tenant=... PASS
* Illustrative only. Real fleet telemetry is available to customers in the dashboard.
LangChain governance sidecar.
Closes the native-tool-calling bypass gap. Intercepts tool dispatches in your LangChain and LangGraph agents and evaluates each against a Cedar policy pack before execution.
pip install qortara-governance-langchainWith LangGraph:
pip install 'qortara-governance-langchain[langgraph]'Compliance Evidence For
SOC 2 ·GDPR ·EU AI Act ·NIST AI RMF
Qortara generates cloud governance evidence including audit trails, policy evaluation records, and framework-aligned reports, all exportable from your dashboard for your auditors.
Using Qortara does not guarantee compliance with any framework. Consult your auditor or legal counsel.
The Moat
Cloud Governance Is The Moat
Microsoft AGT provides a local governance foundation for agent runtimes. Qortara Cloud Governance adds the cloud coordination layer for the cases where agents, policies, and evidence need to span teams, tenants, and organizations.
Qortara acts as the cloud governance broker: portable trust scores, Merkle-chained audit history, and cross-org attestations that give your CISO visibility into the web of trust around inter-org interactions.
Local installations can enforce local policy. They do not, by themselves, create a shared trust mesh across independent organizations. The more organizations on Qortara, the stronger that trust mesh becomes.
Merkle-chained audit
Further reading on federated agent trust
- Cloud Security AllianceThe Agentic Trust Framework: Zero Trust Governance for AI Agents
The Qortara Product Family
Two products, one brand. Start with the open-source SDK inside your own stack. Graduate to managed cross-org governance when the federation boundary matters.
Qortara Governance
Open-source SDK · alpha
LangChain governance sidecar. Closes the native-tool-calling bypass gap. Intercepts agent tool dispatches and evaluates each against a Cedar policy pack before it runs.
v0.1.0 · Apache-2.0
Explore the SDKQortara Cloud Governance
Hosted SaaS · pre-launch
Managed cross-org governance. Shared policy, trust, audit, and compliance evidence beyond a single local runtime. Exposes Qortara Trust Federation as a multi-tenant control plane.
Pilot terms for design partners
Get in TouchQortara Trust Federation is the underlying capability Cloud Governance exposes. Not separately sold.
Core Capabilities
Six pillars of governance for autonomous agent operations.
Runtime Policy Enforcement
Every agent action is evaluated against policy before it runs. No bypass, no delayed compliance sweep; governance at the moment of execution.
Cross-Org Trust Federation
When your agent operates on another org's tools, Qortara layers attestation and trust on top of local agent governance.
Compliance Evidence Generation
SOC 2, GDPR, EU AI Act, and NIST AI RMF evidence generated from your actual execution path. Export on demand for your auditors.
Governance Visibility
Real-time visibility into every agent, policy, and decision across your organization. Built for security teams, not log aggregators.
Saga Step Verification
Multi-step agent workflows are verified end-to-end with pending-verify state and auto-rollback. Nothing commits without confirmation.
Webhook Delivery
HMAC-signed event delivery to your SIEM, SOAR, or ticketing system. Retry with exponential backoff. Your existing tooling, Qortara's signal.
Ready to govern your agent fleet?
Install the open-source SDK today. Pilot terms for Qortara Cloud Governance are available to design-partner organizations. Reach out and we'll walk you through them.
Extends the open-source
Microsoft Agent Governance Toolkit
Compatible with LangChain, CrewAI, AutoGen, OpenAI Agents, Google ADK, and any AGT-supported framework. Built on top of AGT, never a fork. We track Microsoft’s upstream releases to maintain compatibility.