PrefactorvsGalileovsHoneyHive

Galileo vs HoneyHive: how to choose

Both cover agent tracing, offline experiments, online evaluation and human annotation. Galileo, now part of Splunk, adds guardrails that act on model and tool inputs and outputs during a run; HoneyHive is an independent, OpenTelemetry-native platform with prompt versioning and a free tier. Whether you need enforcement from the same vendor, and which buying route suits you, usually decides it.[3][4]

support-agent v4 · one run, two layersexample
Illustrative run, showing what each layer tells you
Galileo / HoneyHivesee
fetch_customer212ms · 1.2k tok
apply_refund1.4s · 3.1k tok
send_reply340ms · 0.8k tok
trace recorded, no verdict
Prefactoradds
Did its job✓ yes
Quality84 / 100
Cost$0.42 · in budget
Drift vs baselinenone
✓ a run that breaches its schema is held for review
§01 / THE SHORT ANSWERtl;dr: which, and when
TL;DR

What is the difference between Galileo and HoneyHive?

Galileo and HoneyHive both trace and evaluate agents, but Galileo can also block harmful model and tool inputs and outputs during a run, and HoneyHive only observes and scores. Galileo has been sold as Splunk Agent Observability since 7 August 2026, after Cisco completed its acquisition in May. HoneyHive is a small independent company with a free Developer tier and quote-based Enterprise pricing, and no published self-serve paid plan.

The short answer

At a glance (checked 20 October 2026)

Decision factorGalileoHoneyHive
OwnershipCisco, completed May 2026; sold as Splunk Agent Observability since 7 August 2026Independent; $7.4M total funding announced April 2025
Run-time guardrailsYes: Agent Control checks model and tool inputs and outputs during a runNone; observes and scores, and logs results from your own guardrails
OpenTelemetryAccepts OTLP; OpenInference instrumentors in Python onlyBuilt on it; OTel GenAI, OpenLLMetry and OpenInference conventions
Prompt toolingPrompts and a playground; version control not documentedPlayground, prompt versioning and deployment by name or version
EvaluatorsLLM judges, Python code metrics and Luna-2 small models; SaaS edition limited to five preset Luna evaluatorsLLM evaluators with custom rubrics, server-side Python evaluators and human review
Self-hostingOn-premises, including air-gapped (commercial)Enterprise only, fully self-hosted or hybrid, documented on AWS
Free tierNone listed for Agent ObservabilityDeveloper: 10,000 events a month, 30-day retention, up to 5 users
Paid pricingFrom $100 a month per 1.2 million spans a year, billed annuallyNo published self-serve plan; Enterprise is quote-based
§02 / CAPABILITY MATRIXside by side: what each covers
Side by side

Galileo vs HoneyHive: capabilities side by side

CapabilityGalileoHoneyHivePrefactor
Observe
LLM call tracing✓✓✓
Multi-step agent tracing (tool calls, nested spans)✓✓✓
Cost tracking✓✓✓
OpenTelemetry support✓✓✓
Evaluate
Offline evals (datasets, experiments)✓✓✓
Online evals on production traffic✓✓✓
LLM-as-a-judge scoring✓✓✓
Code-based evaluators✓✓✓
Human review and annotation✓✓✓
Prompt versioning and playgroundPartial✓—
Act on findings
Runtime controls on live agent actions✓—✓
Gateway or proxy in the request path———
Licence and deployment
Open sourcePartialPartialPartial
Self-hosting✓✓Partial
§03 / IN DEPTHdetail: the reasoning
In depth

Guardrails during the run, or observation only

This is the main product difference. Galileo's Agent Control evaluates model and tool inputs and outputs during agent execution and can block prompt injection, personal data leaks and harmful content using rules set in one place, without changes to agent code. It replaced the older Protect product in June 2026, and its core is open source under Apache-2.0. Blocking content is documented; approval workflows for actions are not.

Read more

HoneyHive does not document blocking, guardrails or approvals on live agent actions. Its Policies feature sets organisation-wide evaluation and monitoring standards, not run-time enforcement. In Microsoft's ASSERT and Agent Control Specification announcement in June 2026, HoneyHive was named as the observability partner, with enforcement handled by the specification itself. If you already enforce in your own code or another layer, HoneyHive can log those guardrail results as custom metrics.

Instrumentation and the daily workflow

HoneyHive is built on OpenTelemetry and accepts traces using the OTel GenAI, OpenLLMetry and OpenInference conventions, with a Collector integration. It offers agent graphs, trajectories, threads and, since September 2026, a conversation view, plus tracing for coding agents such as Claude Code, Codex CLI and Devin. Experiments can gate regressions in CI through GitHub Actions, and deployed prompts are fetched by name or version from code. Its full tracing SDK is Python; the TypeScript package is a REST client, so TypeScript teams may lean on OTLP.

Read more

Galileo accepts OTLP and supports OpenInference instrumentors in Python only, alongside its Python and TypeScript SDKs and native integrations for agent frameworks and A2A tracing. It adds Luna-2 small models as lower-cost judges and multi-turn experiments since June 2026. The Splunk-hosted edition supports five preset Luna evaluators and no custom code evaluators; those are on-premises only. Its prompts page does not document version control, so teams that version prompts heavily will find more in HoneyHive.

Neither runs its own gateway for application traffic. HoneyHive integrates with third-party gateways such as LiteLLM, Portkey and Cloudflare AI Gateway, and its evaluator calls can be routed through Portkey. Galileo ingests through SDKs, integrations, OTLP and its API.

Vendor scale and buying route

Galileo now sits inside Cisco's Splunk, with annual billing and a choice of SaaS or on-premises deployment, including air-gapped. Customers onboarded before 7 August 2026 use Galileo's documentation; later customers use Splunk's.

Read more

HoneyHive is a small company: its last announced funding was $7.4M in total in April 2025, and third-party directories list around 18 to 19 staff. It is SOC 2 Type II and offers a HIPAA BAA on Enterprise. The buying routes differ: HoneyHive lets you start free and requires a sales conversation only beyond the Developer tier, while Galileo has no free starting point and bills annually from the outset.

Deployment options differ in detail. HoneyHive offers multi-tenant SaaS in AWS us-west-2, a dedicated single-tenant cloud, a hybrid model with your data plane and its control plane, and full self-hosting in your own AWS account or VPC on Enterprise. Splunk Agent Observability runs as SaaS in Splunk Observability Cloud or on-premises, including air-gapped. If you must self-host outside AWS, Galileo documents that path and HoneyHive does not.

Pricing shape

As of 20 October 2026, HoneyHive's Developer tier is free with no card, 10,000 events a month, 30-day retention and up to five users. There is no published self-serve paid plan; Enterprise, including self-hosting, is quote-based. Splunk lists Agent Observability from $100 a month per 1.2 million spans a year, billed annually, with a Luna token allowance and no free tier listed.

Read more

The free tier has other limits worth checking before you rely on it: one workspace and 1,000 requests a minute, on multi-tenant SaaS in a single AWS region. Splunk lists extended retention and extra Luna tokens as paid options.

Neither publishes a self-serve monthly plan above its entry point. Read Splunk's pricing and HoneyHive's pricing, then ask both for a quote at your expected volume.

§04 / THE QUALITY GAPour take: where it stops
Our take

Where Prefactor fits

We sell the layer this section describes. Read it with that in mind.

Stated plainly, since Prefactor publishes this page: Prefactor is an agent evaluation platform that scores each step of a run and acts on what it finds through runtime policies on tool calls and data access, approval holds for risky actions, and a kill switch for a run, an agent or a team. Galileo's Agent Control is the closer of these two, since it blocks content during a run; HoneyHive observes and scores. Neither documents approval holds. Prefactor has no prompt playground or prompt registry and its platform is hosted, so if prompt versioning is central to your workflow, HoneyHive covers it and Prefactor does not. See the full comparison of 15 platforms.

See it on your own agents

A working session on a fleet like yours: watch a run evaluated, catch a drift, walk the record.

§05 / WHICH TO PICKdecide: by your stack
Which to pick

Which one fits

Pick Galileo if

  • You need content checks on model and tool inputs and outputs during a run.
  • You already use Splunk Observability Cloud, or Cisco is a strategic vendor.
  • You need an on-premises or air-gapped deployment outside AWS.
  • Luna-2 small models as lower-cost judges suit your scoring volume.

Pick HoneyHive if

  • You want to start free and only talk to sales when you outgrow 10,000 events a month.
  • OpenTelemetry-native ingestion across several conventions matters to you.
  • Prompt versioning and deployment are part of your daily workflow.
  • You trace coding agents such as Claude Code or Devin as well as your own agents.
§06 / HOW WE REVIEWEDsources: checked October 20, 2026
Methodology

How we reviewed this comparison

Reviewed against public product and documentation pages on October 20, 2026. If a vendor has changed a feature, product name, or positioning since then, send a correction and we will update it. Numbered source links in the page body point to the ordered sources below.

Sources reviewed

  1. Galileo pricingChecked 2026-10-20.
  2. Galileo documentation
  3. Galileo ownership and status
  4. HoneyHive pricingChecked 2026-10-20.
  5. HoneyHive documentation
  6. HoneyHive website
  7. Prefactor platform
Prefactor context

Methodology

  • Reviewed public product, documentation, and launch material visible at the time of writing.
  • Mapped each page to the primary buyer, control layer, and runtime capabilities each vendor describes publicly.
  • Prefer direct product and documentation pages over analyst summaries or reseller material.
§07 / QUESTIONSfaq: the common ones
Questions
What is the difference between Galileo and HoneyHive?
Both trace agents, run offline experiments, score production traffic and support human annotation. Galileo, now Splunk Agent Observability, adds Agent Control, which can block harmful model and tool inputs and outputs during a run. HoneyHive is an independent, OpenTelemetry-native platform that observes and scores but does not enforce.
How does Prefactor compare with Galileo and HoneyHive?
Prefactor is an agent evaluation platform for teams building AI agents: it observes every agent run from development to production, evaluates whether the agent did its job, and shows how to improve it. As of 20 October 2026, Prefactor can block or hold a live agent action; Galileo does too and HoneyHive does not. HoneyHive includes prompt versioning and a playground. Prefactor evaluates how prompts perform in live runs rather than providing a prompt playground or registry.
Can I self-host Galileo or HoneyHive?
Both, commercially. Splunk Agent Observability can run on-premises, including air-gapped. HoneyHive offers fully self-hosted or hybrid deployment on its Enterprise plan, documented on AWS.
Which supports OpenTelemetry better?
Both accept OTLP. HoneyHive is built on OpenTelemetry and supports the OTel GenAI, OpenLLMetry and OpenInference conventions. Galileo accepts OTLP traces and supports OpenInference instrumentors in Python only.
Can I use HoneyHive with a separate guardrail layer?
Yes. HoneyHive does not enforce at run time, but guardrail results from your own code can be logged as custom metrics. In Microsoft's ASSERT announcement, HoneyHive is the observability layer and the Agent Control Specification enforces.
Is there a free way to try either?
HoneyHive's Developer tier is free with 10,000 events a month and up to five users. As of 20 October 2026, Splunk lists no free tier for Agent Observability; Galileo's Agent Control component is open source and can be self-hosted on its own.
Who owns Galileo?
As of 20 October 2026: Cisco, which completed its acquisition of Galileo in May 2026. Since 7 August 2026 the product has been sold as Splunk Agent Observability inside Splunk Observability Cloud.
Is Galileo open source?
Partly. The platform is proprietary. Its Python and TypeScript SDKs and Agent Control, its run-time guardrail layer, are open source under Apache-2.0.
How much does Galileo cost?
As of 20 October 2026: Splunk lists Agent Observability from $100 a month per 1.2 million spans a year, billed annually, with a Luna model allowance. No free tier is listed. On-premises deployment is available.
Can Galileo block or hold a live agent action?
Yes. Agent Control checks model and tool inputs and outputs during a run and can block prompt injection, personal data leaks and harmful content using rules set in one place, without changes to agent code.
Who owns HoneyHive?
As of 20 October 2026: HoneyHive is independent. Its last announced funding was $7.4M in total, including a seed round led by Insight Partners in April 2025.
Is HoneyHive open source?
Partly. Its SDKs and tools are MIT-licensed; the platform itself is proprietary.
How much does HoneyHive cost?
As of 20 October 2026: The Developer tier is free with 10,000 events a month, 30-day retention and up to 5 users. There is no published self-serve paid plan; Enterprise, including self-hosting, is quote-based.
Can HoneyHive block or hold a live agent action?
No. HoneyHive does not document blocking, guardrails or approvals on live agent actions. Its Policies feature sets evaluation and monitoring standards, not run-time enforcement.
Is Prefactor open source?
Partly. Its deterministic evals package is Apache-2.0; the platform is hosted.
How much does Prefactor cost?
As of 20 October 2026: Dev is free with 5,000 spans a month. Startup is $49 a month and Scaleup $199 a month. Enterprise is custom above 4 million spans a month.
Can Prefactor block or hold a live agent action?
Yes. Runtime policies can block, throttle, sandbox or escalate an agent's tool calls and data access before they run, approval routing holds risky actions for a person, and a kill switch stops a run, an agent or a team.
Reviewed against public sources on October 20, 2026Suggest a correction

Score the run, then act on it

Prefactor scores each step of every agent run and can hold or stop an action when a score says it should not happen. Start on the free tier: 5,000 spans a month, no credit card required.

Agent Performance Platform
Unified performance platform for agents, authentication, and risk management
All Systems Operational
3Global Agents
7Instances
5Services
12%Human Intervene
4High Risk
$2,360Monthly Spend
Mission ControlLive agent health with 7-day activity heartbeat
Claims Proc...68
$330/moRed
Claims Proc...65
$160/moRed
Claims Proc...82
$170/moAmber
ChatGPT74
$150/moAmber

See how every agent performs, and make it better

Prefactor helps teams observe, evaluate, and improve their AI agents in production, across every framework and provider.