Golem
Actively maintained
not read yet
Use
- For
- Security leaders whose engineers gave coding agents production credentials and need visibility into them.
- Activity
- Actively maintainedsite updated 2 weeks ago
- Used for
- block dangerous agent tool calls before they run
- sign tamper-evident records of every agent action
- run untrusted repository content in an isolated virtual machine
- Has an MCP server (3 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsgolem.team ↗
Price not read
These are Golem's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverteam.golem/contextverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-27
- Address to connectcontext.golem.team/mcp
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Hexmos
AI code reviewer that flags logic errors, credential leaks and bugs at commit time before reaching production.
26.2kActiveFrom $32/mo2023 - #2
Qodo
Performs code review across pull requests and development workflows with full codebase context and enforced quality rules.
14.6kActiveFrom $30/mo - #3
Sourcegraph
Indexes code across many repositories for code search, navigation and batch changes, and supplies that context to developers and coding agents.
10.1kActiveFrom $16,000/yr2017 - #4
KodemMCP · sign-in
Correlates code, dependency and live-workload runtime evidence to show which vulnerabilities are reachable, and verifies that fixes hold.
361ActiveFrom $20,000/yr2021 - #5
Context Mode
Folds test, build and log output before a coding agent's model reads it, archiving the full text for later lookup.
208ActiveFrom $49/mo - #6
Pathmode
Captures product decisions from coding agent proposals before implementation, binding them to repository revisions.
171ActiveFrom $24/user/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Golem for?
Sign in to leave a noteWhat is Golem?
Detects hijacked coding agents, blocks risky tool calls before they run, and signs a tamper-evident log of every action. It is listed in the Atlas under Developer tools.
Who is Golem for?
Security leaders whose engineers gave coding agents production credentials and need visibility into them.
Is Golem free?
No. Its pricing page showed no free plan on 2026-10-27.
Do people use Golem?
Little sign of use.
Is Golem still maintained?
Actively maintained: site updated 2 weeks ago.
What are alternatives to Golem?
In Developer tools, by use: Hexmos, Qodo, Sourcegraph, Kodem, Context Mode, Pathmode.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.