Hoop

Hoop (hoop.dev, operated by Decimals, Inc.) is an open-source, MIT-licensed Layer 7 access gateway that intercepts traffic between AI agents and backend resources -- databases, Kubernetes clusters, SSH hosts, and HTTP services -- to enforce inline data masking, pattern-based command blocking, just-in-time human approval, and full session recording. The core value proposition is credible: it addresses a real gap that OPA-at-admission and Terraform-in-CI leave unguarded, namely live session-level enforcement once an agent is already connected. However, virtually all product claims come from the vendor's own blog, with no independent analysts, no named enterprise customers, and no published third-party security audit or certified SOC 2 report visible in public sources. Pricing is not publicly disclosed, and the product's mindshare in third-party review platforms remains very thin, suggesting it is still early-stage. Enterprises should treat the compliance-alignment narrative (SOC 2, HIPAA, GDPR, PCI) as design intent rather than verified certification until auditor attestations are produced.