╭──────────────────────────────────────────╮ ╭──────────────────────────────────────────╮ │ >>>>>>>>>>>>>>> ctx_read >>>>>>>>>>>> │ │ >>>>>>>>>>>>>>> ctx_read >>>>>>>>>>>> │ ┌─────────────┐ │ >>>>>>>>>>>>>>> compress >>>>>>>>>>>> │ ┌──────────┐ ┌─────────────┐ │ >>>>>>>>>>>>>>> compress >>>>>>>>>>>> │ ┌──────────┐ │ 100K tokens │ =========>│ >>> AST >>> cache >>> signal >>> │ =========> │ ~5K tok │ │ 100K tokens │ =========>│ >>> AST >>> cache >>> signal >>> │ =========> │ ~5K tok │ └─────────────┘ │ >>>>>>>>>>>>>>> filter >>>>>>>>>>>> │ └──────────┘ └─────────────┘ │ >>>>>>>>>>>>>>> filter >>>>>>>>>>>> │ └──────────┘ │ >>>>>>>>>>>>>>> dedupe >>>>>>>>>>>> │ │ >>>>>>>>>>>>>>> dedupe >>>>>>>>>>>> │ ╔══════════════╗ ╰──────────────────────────────────────────╯ ╔══════════╗ ╔══════════════╗ ╰──────────────────────────────────────────╯ ╔══════════╗ ║ raw input ║ ─ ─ ─ ─ ─ ─ ─ ─ LeanCTX ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ║ output ║ ║ raw input ║ ─ ─ ─ ─ ─ ─ ─ ─ LeanCTX ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ║ output ║ ╚══════════════╝ ╚══════════╝ ╚══════════════╝ ╚══════════╝ ┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄ ┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ │░░│ │░░│ │░░│ │░░│ │▓▓│ │▓▓│ │▓▓│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │▓▓│ │▓▓│ │▓▓│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ ───> │▓▓│ │▓▓│ │▓▓│ ───> │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ ───> │▓▓│ │▓▓│ │▓▓│ ───> │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ file file file file read cache send tok tok tok tok tok tok file file file file read cache send tok tok tok tok tok tok ╭──────────────────────────────────────────╮ ╭──────────────────────────────────────────╮ │ >>>>>>>>>>>>>>> ctx_read >>>>>>>>>>>> │ │ >>>>>>>>>>>>>>> ctx_read >>>>>>>>>>>> │ ┌─────────────┐ │ >>>>>>>>>>>>>>> compress >>>>>>>>>>>> │ ┌──────────┐ ┌─────────────┐ │ >>>>>>>>>>>>>>> compress >>>>>>>>>>>> │ ┌──────────┐ │ 100K tokens │ =========>│ >>> AST >>> cache >>> signal >>> │ =========> │ ~5K tok │ │ 100K tokens │ =========>│ >>> AST >>> cache >>> signal >>> │ =========> │ ~5K tok │ └─────────────┘ │ >>>>>>>>>>>>>>> filter >>>>>>>>>>>> │ └──────────┘ └─────────────┘ │ >>>>>>>>>>>>>>> filter >>>>>>>>>>>> │ └──────────┘ │ >>>>>>>>>>>>>>> dedupe >>>>>>>>>>>> │ │ >>>>>>>>>>>>>>> dedupe >>>>>>>>>>>> │ ╔══════════════╗ ╰──────────────────────────────────────────╯ ╔══════════╗ ╔══════════════╗ ╰──────────────────────────────────────────╯ ╔══════════╗ ║ raw input ║ ─ ─ ─ ─ ─ ─ ─ ─ LeanCTX ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ║ output ║ ║ raw input ║ ─ ─ ─ ─ ─ ─ ─ ─ LeanCTX ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ║ output ║ ╚══════════════╝ ╚══════════╝ ╚══════════════╝ ╚══════════╝ ┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄ ┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ ┌──┐ │░░│ │░░│ │░░│ │░░│ │▓▓│ │▓▓│ │▓▓│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │▓▓│ │▓▓│ │▓▓│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ ───> │▓▓│ │▓▓│ │▓▓│ ───> │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ ───> │▓▓│ │▓▓│ │▓▓│ ───> │░░│ │░░│ │░░│ │░░│ │░░│ │░░│ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ └──┘ file file file file read cache send tok tok tok tok tok tok file file file file read cache send tok tok tok tok tok tok

lean-ctx Enterprise

Run agents like
infrastructure.

In 2026, every developer runs coding agents; by 2027 it’s fleets. Agents that touch production code and customer data need real governance — not dashboards. The Enterprise tier gives you full control: deploy in our cloud or your own infrastructure.

Book a pilot View the live demo Read the security model

The Context Plane

Govern what your agents see, use and remember.

One local binary per machine, one policy surface for the fleet. Every read, command and output passes through the same context engineering layer first. Everything below ships in the open-source core today.

See

PathJail confines file access to allowed roots. Secrets are redacted before any model sees them. Prompt-injection screening checks untrusted content, OWASP-aligned.

Use

The shell allowlist blocks dangerous commands before execution. Per-role token budgets cap spend. The MCP gateway routes external tools through one governed entry point.

Remember

Session memory and the knowledge store are local, inspectable files. You decide what persists, what syncs and what gets purged.

Prove

An Ed25519-signed, hash-chained ledger records reads, commands and savings. Verify integrity with one command; export for audit and finance.

Live demo

Don't take our word for it — watch it run.

A real gateway instance is running at demo.leanctx.com: real open-source-model inference, real wire compression, real per-person metering — synthetic identities, measured numbers. Sign in with the published demo credentials and inspect everything.

Gateway console

The org view: spend, verified savings, the avoided-cost baseline and a live breakdown by person × project × model × provider.

Open the console →

Personal /me view

What each engineer sees: their own usage, savings and models — nobody else's. Sign in with the shared guest key.

Open /me →

Value report

The printable ROI artifact finance gets — actual spend, verified savings and the counterfactual baseline, regenerated every 15 minutes from the live ledger.

Open the report →

Access tokens for the console and the /me view are published on demo.leanctx.com — the admin API is read-only, and inference endpoints are not exposed on the public instance. Every number you see is metered from real requests through the unmodified product path — no mock data.

Enterprise plane

Everything in the core, plus fleet control.

The open-source core stays free forever, enforced by a public CI gate. Enterprise adds the plane that lets platform and security teams operate hundreds of agents.

SSO & SCIM

SAML/OIDC sign-on and automated seat provisioning: agents and humans under the same identity plane.

Fleet policies

Centrally managed PathJail roots, allowlists, budgets and persona policies, versioned, reviewed and rolled out like code.

Compliance exports

Signed, aggregated audit and savings reports across the fleet: numbers finance and auditors can verify themselves.

Cloud or self-hosted

Your choice: use our managed cloud, or deploy lean-ctx in your own Azure, on-prem, or air-gapped environment. Same features, your infrastructure.

The open-source core stays free forever. Enterprise adds governance, compliance and dedicated support. See the full tier comparison →

How you pay

Fair pricing, aligned incentives.

No surprise bills, no hidden upsells. Three components, each optional or negotiated to your situation.

Platform Fee

Per-seat license covering governance, support, updates and SLA. Negotiated to your org size — contact sales for a quote.

Guided Onboarding

A 2–4 week fixed-price package: deployment, IdP integration, policy setup, admin training and a developer workshop. One-time, not recurring.

Success Fee (optional)

Pay a capped share of the savings we cryptographically prove. Floor equals your platform fee, cap at 50% of your actual bill reduction. You verify every number offline.

Regulated? Audited?

Frameworks mapped, evidence verifiable.

The context plane answers compliance questions with enforced controls and offline-verifiable evidence — and is explicit about what stays an organisational duty.

EU AI Act · ISO 42001 · SOC 2

Machine-readable mapping matrices, framework policy packs and per-control coverage reports: policy coverage --framework eu-ai-act — 11 of 14 mapped controls technically enforced, gaps documented.

Compliance & evidence →

Evidence bundles

Deterministic, Ed25519-signed audit exports your auditor verifies offline with a standalone tool — no LeanCTX install, no trust in us. Mutation-tested: one flipped byte fails.

How verification works →

Agent identities

Every agent registered, owned by a human, attested and revocable. Owner offboarding suspends a leaver's whole fleet in one audited transaction — no orphaned agents.

Agent governance →

Built on open standards: the Context Governance Benchmark defines the controls, the Open Context Protocol defines the wire format — both citable, both vendor-neutral.

"What leaves the machine?"

Nothing. verify it. LeanCTX runs locally with zero telemetry. The ledger, cache and knowledge store are local files. Network egress happens only where your configuration sends it, and the audit trail records it.

Read the full security model

FAQ

What buyers ask first.

What leaves the machine when developers use LeanCTX?

Nothing, and you can verify it. LeanCTX runs locally with zero telemetry: cache, knowledge store and the signed audit ledger are local files. Network egress happens only where your own configuration sends it. Air-gapped deployment is supported.

How does LeanCTX prove savings and activity to finance and compliance?

Every read, command and saving lands in an Ed25519-signed, hash-chained local ledger. lean-ctx savings verify proves integrity end to end, and lean-ctx savings export produces a compliance-ready export.

Is the core open source and free for local use?

Yes. The complete local context layer is Apache-2.0 and free forever, enforced by a public CI gate that fails any commit putting a local capability behind a paywall. Enterprise adds SSO, fleet policies, compliance exports and air-gapped support on top.

Does LeanCTX help with EU AI Act, ISO 42001 or SOC 2?

Yes — with enforceable mechanisms. Machine-readable mapping matrices link framework controls to enforced policy-pack rules and engine guarantees; lean-ctx policy coverage --framework renders per-control verdicts against your real configuration, and evidence bundles let auditors verify the records offline with a standalone tool. Where a duty is organisational, the mapping says so. Tooling support, not legal advice.

Pilot the Context Plane.

Two weeks, your repos, your policies, and a signed report of what your agents read, ran and saved.

Book a pilot Security model

Run agents likeinfrastructure.