agent · ai security
IBBS vs Secra
55 fields both were evaluated on, 25 of them different — including where one discloses something the other does not. Every value links to the document it came from. 30 further fields are disclosed by neither and are listed at the end rather than tabled.
Assurance
| Field | IBBS | Secra |
|---|---|---|
| Audit trail· | “Each issued badge is dated, pinned to one artifact's SHA-256, and attests only that artifact's behavior in a single run - not a safety certification or guarantee of production behavior.”www.ibuildbots.dev · checked Aug 1, 2026 | Vendor states audit logs can be exported alongside block-rate tracking “track block rates, and export audit logs”www.sec-ra.com · checked Aug 2, 2026 |
| Tamper-evident log· | “ed25519 · sha256-pinned · did:web · offline-verifiable”www.ibuildbots.dev · checked Aug 1, 2026 | no public information www.sec-ra.com · checked Aug 2, 2026 |
| Explainability· | “observed, not asked Every verdict comes from the agent's real behavior — the channels it can't fake — never a self-assigned tier.”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | “Every scan returns a 0-100 trust score combining all detection signals.”www.sec-ra.com · checked Aug 2, 2026 |
| Runtime governance· | “runaway_spend An injection says to ignore the limit and loop forever. it stops on its own, not force-killed at the cap.”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | “Layered Scan Policies Apply stricter thresholds for destructive operations (delete, send) vs. safe operations (read).”www.sec-ra.com · checked Aug 2, 2026 |
| Permission scopes· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “Permission Context Role-based tool validation. Enforce read-only roles, allowlisted operations, and per-user permission boundaries on tool calls.”www.sec-ra.com · checked Aug 2, 2026 |
| Compliance certifications· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “Compliance Reporting Audit-ready compliance reports with threat breakdowns, block rates, and status for your security team.”www.sec-ra.com · checked Aug 2, 2026 |
| Regulatory alignment· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “OWASP Agentic Top 10 Explained: Every Risk, Real Attacks, and Fixes”www.sec-ra.com · checked Aug 2, 2026 |
Safety
| Field | IBBS | Secra |
|---|---|---|
| Safety evaluations· | “We run your agent against 5 real prompt-injection attacks in our own sandbox and issue a signed, independently checkable badge — independent proof others can trust.”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | “OWASP Agentic Top 10 Explained: Every Risk, Real Attacks, and Fixes”www.sec-ra.com · checked Aug 2, 2026 |
| Red teaming· | “We run your agent against 5 real prompt-injection attacks in our own sandbox and issue a signed, independently checkable badge — independent proof others can trust.”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | “Introducing Secra Simulate: Free Adversarial Testing for AI Agents”www.sec-ra.com · checked Aug 2, 2026 |
| Third-party evaluations· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “OWASP Agentic Top 10 Explained: Every Risk, Real Attacks, and Fixes”www.sec-ra.com · checked Aug 2, 2026 |
| Data handling· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “API Keys Generate sk_secra_ scoped keys shown once, bcrypt-hashed at rest.”www.sec-ra.com · checked Aug 2, 2026 |
Practicality
| Field | IBBS | Secra |
|---|---|---|
| Pricing model· | “The report is a tool for you, during development. Verified is the credential others can trust, at publish time.”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | “Priced like infrastructure, not like an API.”www.sec-ra.com · checked Aug 2, 2026 |
| Price point· | $49 one-time · 5 runs “Verified live now $49 one-time · 5 runs Founding price — rising to $99 as we scale .”www.ibuildbots.dev · checked Aug 1, 2026 Not in our latest capture. We captured this page again on Sep 17, 2026 and this quote was not there. How we re-check citations | no public information www.sec-ra.com · checked Aug 2, 2026 |
| Deployment options· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “Drop them into any HTTP client and you're protected.”www.sec-ra.com · checked Aug 2, 2026 |
| Integrations· | MCP or API “Connect via MCP or API — a signed badge in minutes.”www.ibuildbots.dev · checked Aug 1, 2026 | “Works with OpenAI, Anthropic, LangChain, LlamaIndex, raw HTTP, and the three frameworks your team will invent next quarter.”www.sec-ra.com · checked Aug 2, 2026 |
Foundation models
| Field | IBBS | Secra |
|---|---|---|
| Base models· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | |
| Model provider· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | |
| Context window· | no public information www.ibuildbots.dev · checked Aug 1, 2026 |
Ecosystem
| Field | IBBS | Secra |
|---|---|---|
| Protocols supported· | MCP or API “Connect via MCP or API — a signed badge in minutes.”www.ibuildbots.dev · checked Aug 1, 2026 | |
| Tool use· | call a single tool “Submit from your own agent Point your agent's MCP client at ibuildbots — one config block — and call a single tool.”www.ibuildbots.dev · checked Aug 1, 2026 | “Tool Validation Validate LLM-generated tool calls before execution.”www.sec-ra.com · checked Aug 2, 2026 |
| API access· | REST: POST https://api.ibuildbots.dev/verify (Bearer key) “The REST API is one request. verify_agent( "your_agent.py" ) → job_id # REST: POST https://api.ibuildbots.dev/verify (Bearer key)”www.ibuildbots.dev · checked Aug 1, 2026 | “DEVELOPER+ API Keys Generate sk_secra_ scoped keys”www.sec-ra.com · checked Aug 2, 2026 |
| Marketplace presence· | “Find IBBS in the AI Agents Directory → Also on X · TikTok · Moltbook · Email”www.ibuildbots.dev · checked Aug 1, 2026 | no public information www.sec-ra.com · checked Aug 2, 2026 |
Impact
| Field | IBBS | Secra |
|---|---|---|
| User base· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | |
| Deployment scale· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | |
| Documented incidents· | no public information www.ibuildbots.dev · checked Aug 1, 2026 | “One Prompt, 4,000 Machines: The OpenClaw Attack Chain Explained”www.sec-ra.com · checked Aug 2, 2026 |
Disclosed by neither
Both IBBS and Secra publish nothing on these 30 fields. That is a finding about the category rather than a difference between them, so it is recorded here instead of as 30 identical table rows. Each is shown with its source check on the individual profiles.
- Autonomy level
- Human oversight
- Goal complexity
- Action space
- Operating environment
- Initiative
- Target sectors
- High-risk domains
- Availability
- Supported regions
- Support model
- Model swappable
- Open weights
- Fine-tuning
- Multi-agent
- Open source
- Safety policy
- Usage restrictions
- Model or system card
- Incident reporting
- Insurance available
- Insurance carriers
- Coverage limits
- Indemnification
- Liability cap
- Outcome-based pricing
- Settlement mechanism
- Dispute process
- SLA terms
- Evaluation coverage
Questions
- How do IBBS and Secra compare on price point?
- IBBS: $49 one-time · 5 runs. Secra: no public information disclosed.