BotGauge vs Pydantic Logfire

BotGauge 10

No x402 or other machine payment (0). Paid plans for the agent product have no published prices, and botgauge.com/pricing prices the separate QA service (0). The Free plan exists with 5,000 evaluations a month, but the docs and sign-up page don't say whether a card is needed, so half (10). A person signs up in a browser at cloud.botgauge.com and creates keys in the console (0). 0+0+10+0 = 10.

Pydantic Logfire 40

No x402, MPP or L402 (0). Per-unit pricing is public without a login, at $2 per million records beyond the included 10 million, with Team at $49 a month and Growth at $249 (20). The Personal plan is free with no card (20). A person signs up in a browser and approves OAuth or creates the first key. Client registration is unauthenticated but grants nothing until a user consents, and the CLI's login opens a browser (0).

BotGauge 53

No OpenAPI file for the eval or red-team endpoints was found in the docs or llms-full.txt. Ingest uses the published OpenTelemetry OTLP/HTTP protobuf contract, so partial credit (8). llms.txt, llms-full.txt and Markdown for every page on Mintlify (10). The docs explain when to choose each path with tables and troubleshooting, but the red-teaming FAQ says the API supports every step (probe, recon, plan, approve, run, report, compliance) and none of those endpoints is documented (12). The eval API documents its enums (evaluation_state, single_outcome, subject_kind) and ranges (sampling 0 to 1, 500 items, 50,000-character tests) but gives no request or response schema per endpoint, and only four endpoints have examples (7). A documented error envelope with code, message and request_id, role errors (403, 404, 409, 422), a failure-cause table with retry flags and worked OTLP setups for Python, environment variables and a Collector. No list of error codes (11). /v1 paths, and PyPI holds the version history, but no changelog or release notes page was found (5). 8+10+12+7+11+5 = 53.

Pydantic Logfire 81

A public OpenAPI 3.1 document of 68 paths and 106 operations, served without a key. The hosted MCP server is closed source and its host's robots.txt disallows the endpoint, so we did not read its tool schemas (22). llms.txt, llms-full.txt and a Markdown twin of every docs page (10). Every operation has a summary and 83 have a description. The MCP discovery card's tool descriptions say when to call a tool, for example token_info only when the user asks about identity (15). 38 enums in the document. Queries are a free SQL string by design and dashboards are Perses JSON (10). The docs carry curl, Python and TypeScript examples, 94 operations declare a 422 and 89 a 429, but the declared error schema is a single detail string and the document has few examples (11). /v1 paths, a dated product changelog and SDK release notes, with the API document itself at version 0.1.0 (13).

BotGauge 56

Project API keys reach one project, are shown once, stored in a form that can't be read back per the DPA, show their last-used time and revoke immediately, with documented rotation steps. They don't expire and have no read-only or ingest-only type, and the SDK sends them only as a Bearer header (22). Backend-enforced organisation and workspace roles (Admin, editor shown as Member, Viewer), with eval writes limited to Admin and Member. Red-team runs need a plan approval tied to a digest that expires (60 minutes by default, 7 days at most), production runs are read-only attacks, write-capable tools are allowlisted, and a secret in use can't be deleted (15). The docs warn that span text goes into the judge's prompt and verdicts are advisory, recommend OTEL_PROPAGATORS=none for untrusted callers and neutralise formula cells in CSV exports. No guidance for agents reading traces or transcripts back (8). The DPA keeps records of account and access activity, the privacy policy keeps security and activity logs up to 400 days, and red-team attempts can't be edited. No customer-facing audit log is documented (5). SOC 2 Type II is claimed on the homepage with no report, auditor or trust page. No security.txt, disclosure policy or bug bounty found. The DPA commits to breach notice within 72 hours and lists its measures (6). 22+15+8+5+6 = 56.

Pydantic Logfire 80

OAuth authorisation code with PKCE, S256 required for every client, dynamic client registration, pushed authorisation requests and device code, with 44 scopes. API keys carry selected scopes and can be rotated, expired and disabled through the API. No documented option sends a secret in a URL (30). Read-only scopes such as project:read, separate read and write tokens, and an organisation-wide read-only MCP policy that is Enterprise only and experimental. No server-side confirmation step for destructive tools was found (15). The MCP docs state that telemetry can hold user-controlled content and tell agents to treat results as diagnostic data, not instructions. SDK scrubbing is documented (11). The audit log API records logins and changes with user, IP address and a diff, on Enterprise only (9). A valid security.txt, SOC 2 Type II, HIPAA, and an independent penetration test at least every 12 months. No bug bounty found and no advisories published on the SDK repository (15).

BotGauge 67

botgauge, botgauge-tracing and botgauge-cli 0.1.3 on 2026-10-31 (30). Four releases of each since 20 October 2026, 0.1.0, 0.1.1, 0.1.2 and 0.1.3 (20). Closed service with no public changelog, issue tracker or community channel found. Support by email at support@botgauge.com (4). One official SDK, Python, current (10). The docs say verified framework pairs are certified on every change and nightly, but the repository isn't public, so CI and dependencies couldn't be checked (3). 30+20+4+10+3 = 67. The product is 12 days old by its first package release.

Pydantic Logfire 90

The product changelog's newest entry is dated 7 October 2026 and the Python SDK's newest tag, 6.0.0b7, 25 September (30). Seven product changelog entries and ten SDK releases since 20 August (20). The SDK repository shows 208 open issues and pull requests. Pull requests opened in the past fortnight have comments, while several issues from the same period have none yet. Support is by Slack, email and GitHub (17). Current official SDKs, Python 5.1.0 on 11 September and @pydantic/logfire-node 0.18.27. The official MCP registry did not answer our lookup (15). CI, coverage and dependency test workflows and a lock file in the repository. We did not confirm the pass state (8).

BotGauge 55

API responses can be narrowed by subject_ids and subject_kind, a results query takes up to 500 items, and judges read at most 20,000 characters, but no field selection or summaries are documented (12). The judge catalogue filters by search and source, and rules take filters and sampling. No pagination is documented on any list endpoint (10). Errors carry a code, a message and a request id. Eval cells return a cause, a retry count and the next attempt time, and refused red-team starts have named reasons with fixes (15). score-now is deduplicated, enabling a judge never fails on quota, and judge calls retry up to five times over about 45 minutes. No idempotency keys on other writes (8). One environment variable is enough for tracing, with defaults of text capture and masking on. Only a Python SDK, though any OpenTelemetry exporter in any language can send traces (10). 12+10+15+8+10 = 55.

Pydantic Logfire 72

The MCP discovery card lists 51 tools, which scores 5. The tool list is cut to what the credential's scopes allow, and an organisation-wide read-only mode exists on Enterprise, which earns 7 back (12). Queries are SQL with LIMIT, time bounds and a limit parameter from 100 to 10,000, in JSON, Arrow or CSV, and dashboard_list pages by cursor. The query API has no cursor and the docs tell callers to split a range that returns a full page (18). An unknown path on the public API returned a JSON problem body with error_code, retryable and what_you_should_do, and a 429 names the query source and the wait. The declared schema is plainer (17). The docs say destructive variable operations sit in their own tool so clients can rely on destructiveHint. We could not confirm annotations on the other tools, and found no idempotency keys (10). Python, JavaScript and Rust SDKs, a CLI, and OTLP from any OpenTelemetry SDK (15).

BotGauge 18

No status page. status.botgauge.com doesn't resolve and neither the site nor the docs link one (0). With no history to read, 5. No request rate limits for ingest or the eval API. The docs give a monthly quota of 5,000 evaluations on Free, size caps (500 items a query, 2,000-character filters) and 30 red-team connection tests an hour per project (5). No 429 or Retry-After guidance. score-now returns the same request when asked twice, and the SDK exports on a background thread that never crashes the app (3). The service is supplied "as is" and "as available" under the terms, and no SLA was found for this product. The 99.9 per cent SLA on the /ai-agents page belongs to the QA service (0). The service isn't labelled beta, but the SDK is 0.x, marked "4 - Beta" on PyPI, and the docs say API shapes may change before 1.0 (5). 0+5+5+3+0+5 = 18.

Pydantic Logfire 34

Graded as a hosted service (Logfire Cloud). No public status page was found on pydantic.dev, in the Logfire docs or in the files published for agents, so the status page and the incident record both score nothing (0 + 0). Query limits are documented per query source, but as Low, Standard and High levels per plan. The numbers found are a daily query API count on the pricing page (500 requests on Personal and Team, 5,000 on Growth), a 10,000-row maximum and the ingest limits (9). A refused query returns 429 with Retry-After, the docs give a retry example, and 89 of 106 public API operations declare the 429. No idempotency keys for writes were found (12). The pricing page lists an SLA for Enterprise plans with no published terms, and the Terms of Service give no warranty of availability (5). The MCP server, query API and public API carry no beta label, though the public API document is version 0.1.0 and the MCP access policy is marked experimental (8).