# BotGauge vs HoneyHive (slim)

> HoneyHive scores 55.8 (C) to BotGauge's 40.7 (E) for agent tracing. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/botgauge-vs-honeyhive.md (~5,200 tokens) · this version ~3,080 tokens · JSON https://www.anchorterminal.com/compare/botgauge-vs-honeyhive.json · canonical https://www.anchorterminal.com/compare/botgauge-vs-honeyhive
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

HoneyHive scores 55.8 (C) on agent readiness against BotGauge's 40.7 (E), and leads in every scored category. Both do agent tracing.

- BotGauge: E 40.7, rank #1132 of 1260 · https://www.anchorterminal.com/tools/botgauge.min.md
- HoneyHive: C 55.8, rank #784 of 1260 · https://www.anchorterminal.com/tools/honeyhive.min.md
- BotGauge, good for A team that wants adversarial testing of a tool-calling agent before release, with traces and AI-judge evals in the same place, and that is outside the countries the terms exclude.
- HoneyHive, good for Teams that want OpenTelemetry tracing and evals with tight key scoping, drive the platform from a CLI and can talk to sales for volume. Ahead on Reliability, 44 against 18; Schema & documentation, 86 against 53; Agent ergonomics, 63 against 55; Security & auth, 61 against 56; Payments & pricing, 20 against 10; Maintenance & community, 77 against 67.

| Category | BotGauge | HoneyHive |
| --- | --- | --- |
| Reliability (16%) | 18 | 44 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 53 | 86 |
| Agent ergonomics (13%) | 55 | 63 |
| Security & auth (14%) | 56 | 61 |
| Payments & pricing (10%) | 10 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 67 | 77 |
| Transparency & trust (7%) | 64 | 67 |

| Fact (where they differ) | BotGauge | HoneyHive |
| --- | --- | --- |
| Vendor | BotGauge AI Inc. | HoneyHive |
| Hosted endpoint | `https://api.botgauge.com` | `https://api.dp1.us.honeyhive.ai` |
| Licence | Proprietary hosted service under BotGauge's terms (last updated 28 October 2026). The Python SDK on PyPI is source-available under FSL-1.1-ALv2, which allows any use except a competing commercial product and turns each release into Apache-2.0 two years after publication. Its repository isn't public | MIT (SDK, CLI and OpenAPI specs only, platform closed source) |
| Last release | 2026-10-31 | 2026-09-29 |
| Terms last updated | 2026-10-28 | 2025-01-06 |
| Privacy policy last updated | 2026-10-28 | 2025-01-11 |
| Terms restrict benchmarking | not found in the text | yes |
| Terms or service can change without notice | not found in the text | yes |
| Arbitration or class-action waiver | not found in the text | yes |
| Popularity | none | 60 npm/wk, 2.1k PyPI/wk |
| Agent reviews | none | 2.5/5 (2) |

Why the edge:
- Schema & documentation, HoneyHive +33: BotGauge 53 (No OpenAPI file for the eval or red-team endpoints was found in the docs or llms-full.txt. Ingest uses the published OpenTelemetry OTLP/HTTP protobuf contract, so partial credit (8). llms.txt, llms-full.txt and Markdown for every page on Mintlify (10). The docs explain when to choose each path with tables and troubleshooting, but the red-teaming FAQ says the API supports every step (probe, recon, plan, approve, run, report, compliance) and none of those endpoints is documented (12). The eval API documents its enums (`evaluation_state`, `single_outcome`, `subject_kind`) and ranges (sampling 0 to 1, 500 items, 50,000-character tests) but gives no request or response schema per endpoint, and only four endpoints have examples (7). A documented error envelope with `code`, `message` and `request_id`, role errors (403, 404, 409, 422), a failure-cause table with retry flags and worked OTLP setups for Python, environment variables and a Collector. No list of error codes (11). `/v1` paths, and PyPI holds the version history, but no changelog or release notes page was found (5). 8+10+12+7+11+5 = 53.); HoneyHive 86 (Two public OpenAPI 3.1 specs in an MIT repository, data plane with 45 paths and 70 operations and control plane with 8 paths and 15 operations (25). llms.txt with every page as Markdown (10). Every operation has a description, deprecated operations are flagged (22 of them) and `POST /v1/events/search` is labelled the primary way to read events (16). Typed request bodies with bounds such as `limit` 1 to 1,000 and `additionalProperties: false`, though event inputs, outputs and metadata are free-form objects (11). Only 9 operations carry examples, no 429 is declared, and since 24 September permission and key failures all return 404 (9). Spec changelog generated with oasdiff, plus dated product, client and self-hosting changelogs (15).)
- Reliability, HoneyHive +26: BotGauge 18 (No status page. status.botgauge.com doesn't resolve and neither the site nor the docs link one (0). With no history to read, 5. No request rate limits for ingest or the eval API. The docs give a monthly quota of 5,000 evaluations on Free, size caps (500 items a query, 2,000-character filters) and 30 red-team connection tests an hour per project (5). No 429 or Retry-After guidance. `score-now` returns the same request when asked twice, and the SDK exports on a background thread that never crashes the app (3). The service is supplied "as is" and "as available" under the terms, and no SLA was found for this product. The 99.9 per cent SLA on the /ai-agents page belongs to the QA service (0). The service isn't labelled beta, but the SDK is 0.x, marked "4 - Beta" on PyPI, and the docs say API shapes may change before 1.0 (5). 0+5+5+3+0+5 = 18.); HoneyHive 44 (Better Stack page at status.honeyhive.ai with a single component, Backend Platform, and nothing separate for the data plane, control plane or ingestion (12 of 20). The page showed 80.992 per cent uptime for that component and the banner "Some services are down" when we loaded it at 00:59 UTC on 2 October, with no incident write-ups for the last 90 days. The only write-up we found was a SOC 2 incident-response drill from March 2025. We can't tell whether the monitor watches a retired host, but the vendor's own page shows the figure, so 0. The pricing page publishes 1,000 requests a minute on Free and custom limits on Enterprise, and the changelog gives a 7 MiB ingestion body limit (12). The OpenAPI specs declare no 429 and we found no `Retry-After` or backoff guidance. The Python SDK has a configurable retry budget (5). Enterprise includes an uptime SLA with service credits, terms not published (5). API, SDKs and CLI are GA (10).)
- Payments & pricing, HoneyHive +10: BotGauge 10 (No x402 or other machine payment (0). Paid plans for the agent product have no published prices, and botgauge.com/pricing prices the separate QA service (0). The Free plan exists with 5,000 evaluations a month, but the docs and sign-up page don't say whether a card is needed, so half (10). A person signs up in a browser at cloud.botgauge.com and creates keys in the console (0). 0+0+10+0 = 10.); HoneyHive 20 (No x402 or other machine payment (0). The only paid plan is Enterprise at a custom price, so there's no public per-unit or plan price (0). The free Developer plan needs no card (20). A person signs up in a browser to get a key (0).)
- Maintenance & community, HoneyHive +10: BotGauge 67 (botgauge, botgauge-tracing and botgauge-cli 0.1.3 on 2026-10-31 (30). Four releases of each since 20 October 2026, 0.1.0, 0.1.1, 0.1.2 and 0.1.3 (20). Closed service with no public changelog, issue tracker or community channel found. Support by email at support@botgauge.com (4). One official SDK, Python, current (10). The docs say verified framework pairs are certified on every change and nightly, but the repository isn't public, so CI and dependencies couldn't be checked (3). 30+20+4+10+3 = 67. The product is 12 days old by its first package release.); HoneyHive 77 (Python SDK 1.6.1 on 2026-09-29 (30). Python SDK 1.5.0, 1.5.1, 1.6.0 and 1.6.1 and CLI 1.5.0, 1.5.1, 1.6.0 and 1.7.0 since 20 July (20). The product changelog has 14 dated entries since 2 July, the latest on 24 September, and both SDK and CLI changelogs spell out compatibility changes. We didn't load issue reply times (12). The Python SDK is current. The TypeScript SDK repository's last commit was on 17 April and npm `honeyhive` 1.0.45 dates from 9 July (10). The Python SDK repository runs only docs, publish and PR-title workflows, with no test workflow on pull requests that we could see (5).)
- Agent ergonomics, HoneyHive +8: BotGauge 55 (API responses can be narrowed by `subject_ids` and `subject_kind`, a results query takes up to 500 items, and judges read at most 20,000 characters, but no field selection or summaries are documented (12). The judge catalogue filters by `search` and `source`, and rules take filters and sampling. No pagination is documented on any list endpoint (10). Errors carry a code, a message and a request id. Eval cells return a cause, a retry count and the next attempt time, and refused red-team starts have named reasons with fixes (15). `score-now` is deduplicated, enabling a judge never fails on quota, and judge calls retry up to five times over about 45 minutes. No idempotency keys on other writes (8). One environment variable is enough for tracing, with defaults of text capture and masking on. Only a Python SDK, though any OpenTelemetry exporter in any language can send traces (10). 12+10+15+8+10 = 55.); HoneyHive 63 (No MCP server for platform data. The docs MCP only searches documentation. Event search defaults to 1,000 rows with no field projection, so an agent has to set `limit` itself (10). Filters, date ranges, `limit` and `page` on search (18). Since 24 September a bad key, a revoked key and a missing permission all return the same 404 as a missing resource, which leaves an agent guessing (10). `POST /session/start` is idempotent on `session_id`. We found no other idempotency keys (10). Python SDK, TypeScript SDKs and a CLI generated one to one from the specs with agent skills. Few required parameters (15).)
- Security & auth, HoneyHive +5: BotGauge 56 (Project API keys reach one project, are shown once, stored in a form that can't be read back per the DPA, show their last-used time and revoke immediately, with documented rotation steps. They don't expire and have no read-only or ingest-only type, and the SDK sends them only as a Bearer header (22). Backend-enforced organisation and workspace roles (Admin, editor shown as Member, Viewer), with eval writes limited to Admin and Member. Red-team runs need a plan approval tied to a digest that expires (60 minutes by default, 7 days at most), production runs are read-only attacks, write-capable tools are allowlisted, and a secret in use can't be deleted (15). The docs warn that span text goes into the judge's prompt and verdicts are advisory, recommend `OTEL_PROPAGATORS=none` for untrusted callers and neutralise formula cells in CSV exports. No guidance for agents reading traces or transcripts back (8). The DPA keeps records of account and access activity, the privacy policy keeps security and activity logs up to 400 days, and red-team attempts can't be edited. No customer-facing audit log is documented (5). SOC 2 Type II is claimed on the homepage with no report, auditor or trust page. No security.txt, disclosure policy or bug bounty found. The DPA commits to breach notice within 72 hours and lists its measures (6). 22+15+8+5+6 = 56.); HoneyHive 61 (Four key types. Project keys (`hh_`), read-only project keys (`hh_ro_`) since 11 June, fine-grained control plane keys (`hh_fgcp_`) with chosen permissions and a required expiry of at most 365 days, and ingestion-only keys (`hh_ingst_`) bound to one project since 17 September. Revocation takes effect within two minutes (30). Read-only and ingestion-only keys give least privilege, and deleting a workspace with active children fails with 409 unless `--dangerously-delete-child-scopes` is passed (18). Traces hold whatever the application logged, and we found no prompt-injection guidance for agents reading them (3). No audit log found (0). The pricing page claims SOC 2 Type II, GDPR and HIPAA. The Drata trust centre at trust.honeyhive.ai rendered nothing readable to us, there's no security.txt, and the CLI changelog lists "Security fixes" in 1.6.0 without detail (10).)