Operant

Operant AI is a San Francisco-based runtime security company (founded 2021, backed by Felicis) that protects cloud and AI applications with real-time, Kubernetes-native "3D Runtime Defense" — discovery, detection, and defense across APIs, services, LLMs, and agents. Its platform delivers automatic API discovery and catalogs, API-to-API microsegmentation, protocol-specific authentication/authorization, traffic rate limiting, inline auto-redaction of sensitive/PII data, and OWASP/MITRE guardrails that block a majority of the OWASP Top 10 threats. Product lines include Agent Protector, Endpoint Protector, AI Gatekeeper, an MCP Gateway, and Cloud Application Detection and Response (CADR). Operant is SOC 2 Type II compliant and publishes open-source tooling such as Woodpecker (red teaming for AI and cloud).

Operant is profiled on the APIs.io network. Tagged areas include Company, Security, API Security, AI Security, and Runtime Security.

Operant’s developer surface includes documentation, engineering blog, pricing, signup flow, support, and 8 more developer resources.

🌐 Visit website 📡 Source on GitHub
20.4/100 emerging ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-07-27 · rubric v0.5
0 APIs
CompanySecurityAPI SecurityAI SecurityRuntime SecurityCloud SecurityKubernetesAgentic AICADRDetection and Response

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 20.4/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 3.0 / 20
Commercial Clarity 7.9 / 20
Operational Transparency 2.7 / 13
Governance 0.0 / 12
Discoverability 6.8 / 10
Agent readiness — 0/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/operant: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Operant Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Operant Trust Center

SOC 2 Type II

SECURITY

Resources

Get Started 2

Portal, sign-up, and the first successful call

SignUp
SignUp
 Login
Login

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Lifecycle
Lifecycle

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 3

Authentication, authorization, and security posture

Compliance
Compliance
 TrustCenter
TrustCenter
 DomainSecurity
DomainSecurity

Operate 2

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage

Commercial 1

Pricing, plans, and the legal terms of use

Pricing
Pricing

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: operant
name: Operant
description: Operant AI is a San Francisco-based runtime security company (founded 2021, backed by Felicis) that protects
  cloud and AI applications with real-time, Kubernetes-native "3D Runtime Defense" — discovery, detection, and defense across
  APIs, services, LLMs, and agents. Its platform delivers automatic API discovery and catalogs, API-to-API microsegmentation,
  protocol-specific authentication/authorization, traffic rate limiting, inline auto-redaction of sensitive/PII data, and
  OWASP/MITRE guardrails that block a majority of the OWASP Top 10 threats. Product lines include Agent Protector, Endpoint
  Protector, AI Gatekeeper, an MCP Gateway, and Cloud Application Detection and Response (CADR). Operant is SOC 2 Type II
  compliant and publishes open-source tooling such as Woodpecker (red teaming for AI and cloud).
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://cdn.prod.website-files.com/679016dc377b83ff1bad1fd4/6790179d12a457a36ea38e03_Operant%20-%20Zen%20Favicon.png
url: https://raw.githubusercontent.com/api-evangelist/operant/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- felicis
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Company
- Security
- API Security
- AI Security
- Runtime Security
- Cloud Security
- Kubernetes
- Agentic AI
- CADR
- Detection and Response
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://operant.ai
- type: Documentation
  url: https://docs.operant.ai
- type: Blog
  url: https://www.operant.ai/art-kubed
- type: Pricing
  url: https://www.operant.ai/platform/pricing
- type: SignUp
  url: https://www.operant.ai/platform/start-now
- type: Login
  url: https://app.operant.ai/
- type: Support
  url: https://www.operant.ai/company/contact
- type: GitHubOrganization
  url: https://github.com/OperantAI
- type: StatusPage
  url: https://operant.statuspage.io/
- type: Compliance
  url: security/operant-trust-center.yml
- type: TrustCenter
  url: security/operant-trust-center.yml
- type: DomainSecurity
  url: security/operant-domain-security.yml
- type: Lifecycle
  url: lifecycle/operant-lifecycle.yml
x-enrichment:
  date: '2026-07-20'
  status: enriched
  artifacts_added: 3
  pass: local-v1