Gryph

Gryph is an open source tool from SafeDep that monitors every AI coding agent action across a team's projects and workflows. It sits within SafeDep's wider platform for open source software supply chain security, which also includes Vet for scanning and governing dependencies, PMG for blocking malicious packages at install time, and xbom for generating AI enriched bills of materials from real code evidence. The audience is security and engineering teams that let AI agents write and run code on developer machines and in pipelines, and need an audit trail of what those agents actually do. Around Gryph, SafeDep offers AI agent discovery to see every AI tool and SDK in use across an organization, an MCP server that blocks threats inside an AI coding agent, real time threat intelligence on malicious packages, CI/CD protection and centralized policies. The listing points at the SafeDep company site, and the pricing below applies to the SafeDep platform rather than Gryph on its own. The Free plan costs 0 dollars and covers up to 3 SDLC endpoints with 7 day findings history. The Team plan is priced per endpoint at 20 dollars a month, shown as 100 dollars a month for 5 endpoints, with 90 day history and email support. Annual billing saves 20 percent, and a 30 day trial needs no credit card. Enterprise pricing is custom.