Free plan: $0 during early access with 2 seats and 3 agents. Planned paid plans: Builder at $49/month with 5 seats and 25 agents; Scale at $199/month with 25 seats and 250 agents. Self-hosting is free.
Key features
X.509 certificate issuance via AWS KMS with private keys stored in HSM
Real-time behavioral monitoring and drift detection across eight risk dimensions
Content-risk scoring of agent outputs per EU AI Act Article 5
Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
Public verification endpoint with sub-500ms response and no authentication required
OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
RFC 8693 delegation chains and signed forensics
Webhook event delivery with HMAC signatures and audit logging
AgentMail: verifiable email inbox per certified agent for regulatory communication
Onchain allowances and epoch budgets
Escalation through reporting tree
Session keys with automatic expiration
Constitutional governance with veto windows
Declared flows and human gates
Slack and Telegram supervision
Visual org builder and workspace
Apache-2.0 open source contracts and SDK
Inference budgets for model and API calls
Integration with Coinbase AgentKit and Safe
What makes it different
Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
Bounded blast radius: compromised agents can only spend remaining epoch allowance on whitelisted targets
Passkey root stays on user's device; cloud holds only scoped, expiring session keys
Fully self-hostable open protocol with Apache-2.0 licensing
Approval workflows follow real organizational structure, not smart contract code
No token or cryptocurrency knowledge required to use the cloud platform
Kakunin
LaCrew