Stacklok
Kubernetes-native, open-source platform for governing and securely running enterprise AI agents and MCP servers.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Stacklok, co-founded by Kubernetes co-creator Craig McLuckie, sells an open, self-hosted architecture for running enterprise AI agents. Its open-source ToolHive platform manages MCP servers, supplemented by an MCP gateway, registry and runtime, and an LLM gateway for governing model calls and cost.
The design emphasises identity so each agent action and tool call can be traced to an accountable person or team. Stacklok raised a $17.5M Series A in 2023 led by Madrona with Accel, and lists Bain Capital Ventures as an investor. Its site cites project44, TRM Labs and KT Cloud.
Innovation Matrix Assessment
Quickly moved from supply-chain tooling (Minder) to MCP/agent governance, tracking a fast-moving space.
Gives security teams a governed, auditable way to run agent tool access instead of ad hoc MCP servers.
Tier-one investors and named testimonials, though adoption scale is not independently quantified.
Open-source, identity-centric agent control plane differs from SaaS-only AI gateways.
Customer testimonials are vendor-published; no independent testing found.
Agent governance should be durable as agentic AI spreads.
Why CISOs Should Care
Agents calling tools expand the attack surface; a governed MCP layer with identity gives auditability.
What Makes It Different
Open-source and self-hosted on Kubernetes, anchored in agent identity and traceability.
The Matrix Verdict
67/100 — INCREMENTAL INNOVATOR
Stacklok is a Meaningful Innovator on the lower boundary: an experienced team in a strategic emerging niche, with efficacy evidence still thin.
Editorial Note: Claims vs. Verified Findings
Product claims and testimonials are vendor-published. Funding is corroborated by Preqin/Seedtable listings. HQ city and founding year are based on commonly reported information not confirmed on the company site.
Sources
Alternatives to Stacklok
Adaptive Security
AI-driven platform that simulates deepfake, voice, and multichannel social-engineering attacks to train and test organizations against next-generation phishing.
Quilr
Early-stage agentic AI security startup building a 'Service-as-Software' platform to guard against human-related breaches and secure AI agent…
Zenity
Governance and security platform for AI agents and low-code/no-code development, securing agent identity, permissions and behavior across the…
Gray Swan AI
Carnegie Mellon-linked startup building automated red-teaming and runtime guardrails that frontier AI labs use to stress-test their models…
Tenzai
An agentic AI penetration testing startup building autonomous 'AI hackers' to find and validate exploitable vulnerabilities at a…
Reco
Reco secures the "agentic ecosystem" — mapping what AI agents can access across SaaS and enterprise apps, detecting…