| What it does | Cryptographic identity and behavioral monitoring for AI agents in regulated industries
| Authorization layer for AI agent spend with human-approved mandates and tamper-evident proof
|
|---|
| Stage | Startup
| Startup
|
|---|
| Founded | 2025
| 2026
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Free trial
| Free trial
|
|---|
| Pricing | Starter: $39/agent/month (minimum 5 agents, $195/month total); Professional: $99/agent/month (minimum 20 agents, $1,980/month total); Enterprise: custom pricing. 30-day free trial on all plans.
| Free 12 week pilot for card issuing platforms
|
|---|
| Key features | - X.509 certificate issuance via AWS KMS with private keys stored in HSM
- Real-time behavioral monitoring and drift detection across eight risk dimensions
- Content-risk scoring of agent outputs per EU AI Act Article 5
- Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
- Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
- Public verification endpoint with sub-500ms response and no authentication required
- OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
- RFC 8693 delegation chains and signed forensics
- Webhook event delivery with HMAC signatures and audit logging
- AgentMail: verifiable email inbox per certified agent for regulatory communication
| - Passkey-signed spend mandates with purpose, budget, merchants, and time windows
- Real-time authorization decisions with sub-1 second response time at p99
- Human challenge via passkey step-up for exceptional spend
- Fail-closed payment processing if no decision arrives in time
- Hash-chained evidence ledger with tamper-evident records
- Exportable evidence packs for chargebacks and audits
- Supports card, wallet, x402 and stablecoin payment rails
|
|---|
| What makes it different | - Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
- X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
- Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
- Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
- Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
| - Human-approved mandates enforce intent, not just static limits or merchant category blocks
- Operates outside the agent in the issuer's authorization path, preventing agent bypass or override
- Creates tamper-evident audit trail linked to agent identity, run, and policy version
- Never holds funds or issues cards; integrates with existing issuer infrastructure
- Single mandate and policy core across multiple payment rails and issuers
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 40 ▼ −1 (down) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 9 | 0 |
|---|
| Citation Flow (Majestic) | 30 | 0 |
|---|
| Referring domains (Majestic) | 258 | 0 |
|---|
Kakunin
Levee