910 installs/mo
Established
- For
- Developers and teams giving AI agents a dedicated mailbox with screening and human approval
- Price
- From $13.30/mopricing page, read 2026-10-12 ↗
- Trial & discounts
- 30-day money backpricing page ↗
- Activity
- Actively maintainedrelease 7 days ago · site updated 3 days ago
- Company
- ReplyLayer LLC · Domain since 2026privacy policy · domain registered
- Runs as
- APISDKCLI
- set up a support agent with a dedicated inbox and threaded replies
- hold risky refund promises for human review before sending
- inspect invoice attachments before an agent reads them
- Domain since2026domain registered
- Run byReplyLayer LLCprivacy policy ↗
- Trains on your dataNosecurity page ↗
- Certifications they stateSOC 2 · ISO 27001 · HIPAA · GDPR · CCPAsecurity page ↗
- Data processing agreementpublishedDPA ↗
- Privacy policy updated2026-09-27privacy policy ↗
- Security contactsecurity.txt
“We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”
security page ↗
These are ReplyLayer's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverai.replylayer/replylayerverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-12
- Address to connectapi.replylayer.ai/v1/mcp
- Status pagelinked from the homepagestatus.replylayer.ai ↗
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
PromptGuard
Inspects requests to LLM applications and blocks prompt injection, jailbreak attempts, and personally identifiable information leaks.
12ActiveFrom $99/mo - #2
HaltState
Intercepts and enforces policies on AI agent actions before execution, blocking prohibited operations and routing exceptions to human review.
2Active— - #3
Guardian IDE
Enforces architecture and security policies on AI-assisted code changes with human approval gates before release.
2not read— - #4
AIBIM AI
Monitors and enforces policies on AI application prompts, tool calls, and responses at runtime.
1ActiveFree - #5
Delphi Security
Detects and blocks threats inside AI agents through runtime monitoring and inter-agent message inspection.
1not read—2026 - #6
LateosMCP · sign-in
Detects malicious and typosquatted npm packages by behavior, and offers a pay-per-query API serving executable SOAR security playbooks to AI agents.
424 installs/moActive—
What is ReplyLayer?
Screens email for AI agents, blocking risky messages and requiring human approval before sending sensitive replies. It is listed in the Atlas under Security and made by ReplyLayer LLC.
Who is ReplyLayer for?
Developers and teams giving AI agents a dedicated mailbox with screening and human approval
How much does ReplyLayer cost?
Paid plans start at $13.30/mo, per ReplyLayer's pricing page on 2026-10-12.
Is ReplyLayer free?
No. Its pricing page showed no free plan on 2026-10-12.
Do people use ReplyLayer?
Established: 910 installs/mo (npm).
Is ReplyLayer still maintained?
Actively maintained: release 7 days ago · site updated 3 days ago.
Who owns ReplyLayer?
ReplyLayer is run by ReplyLayer LLC, per its privacy policy (2026-10-12).
Does ReplyLayer train AI on your data?
No, per its security page (2026-10-12): “We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”
Is ReplyLayer safe?
We do not audit vendors. What ReplyLayer publishes, read 2026-10-12: SOC 2, ISO 27001, HIPAA, GDPR, CCPA stated on its security page; on training with your data, “We do not use your email (message content, attachments, or metadata, including anything that reaches us through the API, CLI, MCP server, or integrations such as our Cursor plugin) to train or fine-tune AI models, ours or anyone else s, and we do not build training or evaluation datasets from it.”.
Does ReplyLayer give refunds?
In its own words (terms of service, 2026-10-12): “Fees are non-refundable except where required by law or where we expressly state otherwise.”
Is ReplyLayer HIPAA compliant?
ReplyLayer states HIPAA compliance on its security page (2026-10-12). We have not verified it.
What are alternatives to ReplyLayer?
In Security, by use: PromptGuard, HaltState, Guardian IDE, AIBIM AI, Delphi Security, Lateos.
Not quite it? Describe the job
betaFive tools from the Atlas that fit it, each judged against what you wrote.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.