Live · Available today
OPEN CORE For everyone

What's open.
What's hosted.

Sgraal is open core. The SDK, Proxy, and Edge mode are Apache 2.0 open source. The 87-module scoring engine, fleet vaccine corpus Beta, and per-tenant calibration stay on sgraal.com.

No ambiguity. No bait-and-switch. Self-host the open layer for free. Pay for the hosted engine when you're ready.

The cut line

Open source vs hosted, line by line.

Every component, mapped to one side or the other. Nothing in between.

Open core layer

Apache 2.0 · GitHub

Python SDK

Live

Canonical client library. pip install sgraal. Wraps the REST API with type-safe Python classes, circuit breaker, and graceful local fallback when the API is unavailable.

Python SDK + MCP server + 6 published adapters (3 beta)

Live

LangChain, CrewAI, Mem0, AutoGen, LlamaIndex, Haystack, Semantic Kernel, OpenAI Agents, and more. Each adapter is a thin shim that converts native framework memory objects into the Sgraal MemCube schema.

Sgraal Proxy

Beta

Drop-in HTTP proxy for Mem0, Zep, and Letta clients. One env var change (MEM0_URL=https://proxy.sgraal.com) and every memory call gets a Sgraal preflight in front. Early access — see /developers.

Edge mode

Live

Zero-dependency, sub-millisecond p99 latency scoring. Runs entirely in your process — no numpy, no scipy, no requests. For air-gapped, classified, and ultra-low-latency deployments. Subprocess-isolated test proves zero leakage.

OpenAPI specification

Live

Full API contract published. Generate your own client in any language. The hosted engine is closed, but the wire format is public and stable.

R1–R3 benchmark corpus

Live

239 adversarial test cases across Rounds 1 through 3. Run them locally, compare your own model, contribute new attack vectors. The R6–R12 corpus stays private (held back for vendor benchmarking integrity).

MCP server

Live

Claude Desktop integration via @sgraal/mcp. Drop into your claude_desktop_config.json and Claude can call Sgraal preflight on any memory state.

Hosted engine

sgraal.com · Commercial

87-module scoring engine

Full production pipeline: Weibull decay, drift ensemble, persistent homology, policy-consistency checks, attack-surface detection. The fallback SDK gives you Weibull-only scoring; the hosted engine runs all 87 modules.

Fleet vaccine corpus

Attack signatures detected on one tenant propagate (AES-256-GCM encrypted) across the fleet within seconds. Your agents get herd immunity from other customers' incidents. The corpus is held privately to prevent attackers training against it. Beta In active development — not yet production-ready. Early access: hello@sgraal.com.

Per-tenant calibration

Thresholds tune to your traffic. After ~20 samples, decision boundaries adapt to your domain, action types, and risk profile. Your calibration is yours — never shared, never aggregated into other tenants' models.

Q-learning per-domain

Production reinforcement learning. The engine adapts its action recommendations based on actual outcomes you report via /v1/outcome. Tenant-isolated Q-tables.

R12 adversarial corpus

60 hard cases held back. We test every release against them and publish results (52/60 current). The corpus stays private to keep the benchmark honest — vendor claims of "100% on R12" must come from blind evaluation, not memorisation.

W3C VC signing

Per-tenant PASSPORT_SIGNING_KEY issues Verifiable Credentials for compliance evidence (MVMem certificate, conformity declaration, attestation receipts). Court-admissible, regulator-grade.

The licence

Apache 2.0. In plain English.

You can

  • Self-host the SDK, Proxy, and Edge mode anywhere — your servers, your customer's servers, classified environments.
  • Modify the code for any purpose — commercial, internal, research, personal.
  • Redistribute binaries and source, including modified versions.
  • Use in commercial products without paying royalties or sharing your changes.
  • Sublicence as part of a larger work.
  • Run the R1–R3 benchmark against your own models or competitors'.

You must

  • Include the licence with redistributions. Keep the Apache 2.0 notice intact.
  • State changes if you modify and redistribute. A simple changelog entry is fine.
  • Preserve attribution notices and copyright headers in source files.
  • Use your own API key if you call the hosted engine. The SDK is open; the engine is not.

Apache 2.0 explicitly grants patent rights and provides a "no warranty" disclaimer. Standard, permissive, business-friendly.

The philosophy

Why open core, not full open source?

The honest answer: full open source for a security product creates a perverse incentive.

If we open-sourced the 87-module scoring engine and the R12 adversarial corpus, attackers would have the same source code we use to detect them. Worse, they would have our calibration values, our fleet vaccine signatures, and the exact regex thresholds we use to flag manipulation. Every public commit would be a manual for evasion.

So we split the system. The interface is open — SDK, Proxy, Edge mode, OpenAPI spec, MCP server, R1–R3 corpus. Anyone can audit the wire format, fork the SDK, run the early benchmarks, and integrate with their stack without permission. The engine is hosted — the 87-module scoring pipeline, the R12 corpus, the fleet vaccine database, and your tenant's calibration. We run it; you call it.

This is the same pattern that works for MongoDB, Elastic, HashiCorp, Confluent, and most of the durable open-core companies in infrastructure. The OSS layer is genuinely useful on its own (you can self-host Sgraal's edge mode in an air-gapped DoD environment if you want). The commercial layer powers the things only a hosted service can do well: cross-tenant threat propagation, real-time calibration, signed compliance certificates.

You get transparency where it matters — the contract between your code and ours is public and stable. You get sustainability where it matters — we can afford to keep researching and shipping because the engine is a real business. And you get an honest middle ground that doesn't pretend to be one thing while being another.

If you want to dig deeper into the trade-offs we considered, the whitepaper has the long-form discussion. The short version: open the interface, host the intelligence.

Start where you want.

The SDK is on GitHub. The playground is one click away. The pricing page is honest.