| What it does | Cryptographic identity and behavioral monitoring for AI agents in regulated industries
| Secure execution for AI agents in isolated Firecracker microVMs or WebAssembly
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2025
| Not given
|
|---|
| Based in | US
| CZ
|
|---|
| Pricing model | Free trial
| Not given
|
|---|
| Pricing | Starter: $39/agent/month (minimum 5 agents, $195/month total); Professional: $99/agent/month (minimum 20 agents, $1,980/month total); Enterprise: custom pricing. 30-day free trial on all plans.
| Free plan: no card required, 5 concurrent sandboxes, up to 1 hour per sandbox, one-time welcome credit. Pro: $49.00/month (excl. VAT) with $25.00 usage credit, 25 concurrent sandboxes, up to 24 hours per sandbox, 100 vCPU/100 GB RAM total. Team: $119.00/month (excl. VAT) with $50.00 usage credit, 10
|
|---|
| Key features | - X.509 certificate issuance via AWS KMS with private keys stored in HSM
- Real-time behavioral monitoring and drift detection across eight risk dimensions
- Content-risk scoring of agent outputs per EU AI Act Article 5
- Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
- Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
- Public verification endpoint with sub-500ms response and no authentication required
- OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
- RFC 8693 delegation chains and signed forensics
- Webhook event delivery with HMAC signatures and audit logging
- AgentMail: verifiable email inbox per certified agent for regulatory communication
| - Isolated Firecracker microVMs with own kernel and filesystem
- Background jobs that survive disconnects
- Batch execution with up to 1,000 jobs and dependency passing
- WebAssembly jobs starting in milliseconds without VM boot
- Budget Guard with cost reserves and limits
- Execution receipts with runtime, isolation, resources and file hashes
- Native MCP server integration for ChatGPT and Claude
- Compact log digests instead of full 5,000-line logs
- Server-side job waiting with signed webhooks
- Verified package cache for PyPI, npm, Go and Rust
|
|---|
| What makes it different | - Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
- X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
- Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
- Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
- Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
| - Two runtimes with honest isolation labeling
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 40 ▼ −1 (down) since last check | 2 ● no change since last check |
|---|
| Trust Flow (Majestic) | 9 | 0 |
|---|
| Citation Flow (Majestic) | 30 | 0 |
|---|
| Referring domains (Majestic) | 258 | 0 |
|---|
Kakunin