heddle logo
heddle
★ 14
vs
norviq logo
norviq
★ 26

heddle vs norviq

heddle: Heddle provides a policy-and-trust layer for Model Context Protocol (MCP) tool servers, enabling secure and declarative exposure of APIs as AI agent tools. It offers built-in security features such as trust enforcement, credential brokering, and tamper-evident audit logging, alongside containerized sandboxing and AI-powered configuration generation.; norviq: Norviq is a policy enforcement point that intercepts and evaluates every LLM agent tool call against OPA/Rego policies on Kubernetes. It prevents potential risks like prompt injection or reasoning errors by ensuring tools only run if explicitly allowed by policy, enhancing AI safety and auditability.

01

TL;DR

heddle logo
heddleSecurity & Safety · ★ 14

Securely Exposing APIs to LLMs

norviq logo
norviqSecurity & Safety · ★ 26

Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval.

02

Side-by-Side Comparison

Field
heddle logoheddle
norviq logonorviq
Category
Security & Safety
Security & Safety
Stars
★ 14
★ 26
License
MIT
Apache-2.0
Install Command
git clone https://github.com/goweft/heddle.git && cd heddle && python -m venv venv && source venv/bin/activate && pip install -e ".[dev]"
kubectl create namespace norviq && kubectl create namespace default && helm install norviq oci://ghcr.io/norviq-dev/charts/norviq --version 0.2.5 -n norviq --set 'policyQuotaNamespaces={default}' --set config.dbSslMode=disable
Updated
1mo ago
3w ago
Open Source
Yes
Yes
Tags
AI Agent Security, Policy Enforcement, Declarative Configuration
LLM Agents, Policy Enforcement, Kubernetes
03

Features

heddle logoheddle
01Declarative YAML Tool Configuration
02Comprehensive Security Controls
03AI-Powered Configuration Generation
04Containerized Sandboxing
norviq logonorviq
01Policy enforcement using OPA/Rego for sub-second, fail-closed evaluation of agent tool calls.
02Kubernetes-native deployment with custom resource definitions (CRDs), a mutating webhook, and Helm chart support.
03Supports workload identity using SPIFFE/SPIRE SVIDs for granular, per-agent-class and per-namespace policy scoping.
04Provides a Console UI for policy catalog/editor, attack/asset graphs, agent trust management, and audit stream.
05Includes a red-team suite with built-in adversarial tests to validate policy effectiveness against attacks like prompt injection or SQLi.
04

Use Cases

heddle logoheddle
↳Securely Exposing APIs to LLMs
↳Building AI Agent Tool Meshes
↳Automating Daily Operations with AI
↳Managing GPU Resources for LLMs
norviq logonorviq
↳Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval.
↳Ensuring compliance by enforcing policy-driven gates on agent tool interactions and providing comprehensive audit logs for all decisions.
↳Implementing fine-grained security policies for different agent classes and namespaces within a Kubernetes environment.
↳Detecting and blocking prompt injection or reasoning errors that could lead to malicious tool execution or data exfiltration.
FAQ

FAQ

What is the difference between heddle and norviq?
Both heddle and norviq are in the Security & Safety category. heddle has 14 stars, while norviq has 26 stars.
Which is better, heddle or norviq?
The best choice depends on your use case. Choose heddle if Securely Exposing APIs to LLMs, and norviq if Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval..
Is heddle free or open source?
Yes, heddle is open source on GitHub (MIT).
Is norviq free or open source?
Yes, norviq is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related