Runtime security for AI agents

Let agents move fast. Keep every action
in bounds.

Aegis is the real-time enforcement firewall between your AI agents and the production systems they touch. Inspect prompts, responses, tool calls, and MCP traffic before risk becomes action.

OpenAI-compatible Tool & MCP aware 2.9 ms rails · 14 ms tool guard
aegis / runtime radar enforcing
Execution Request Path req_8F21A
01 Input Rail clear
02 Tool Guard held
03 Execution blocked
Action intercepted wire_transfer Amount $250,000 exceeds single-action policy threshold ($10,000)
Denied
Active Policy financial-ops
Inspection Time 12.6 ms
Audit Trail Recorded (Hash-chained)
p95 rail overhead 2.9 ms
Execution checks 6 on every tool & MCP call

Illustrative demo. Latency figures are measured on our benchmark suite; request traffic is sample data.

01 / 03
The Platform

A deterministic execution firewall for AI that acts.

Aegis sits directly in front of your models, tools, and MCP servers. Every interaction is evaluated against deterministic policies before destructive actions reach backend systems.

Explore complete architecture
01Agentrequest
Aegisinspect & enforce
03Tools / MCPsafe payload

Drop-in compatibility across the AI ecosystem

OpenAI Anthropic Model Context Protocol (MCP) LangChain CrewAI AutoGen Splunk Kubernetes

Built against the controls your auditors already ask about

OWASP LLM Top 10 Every verdict mapped
EU AI Act Art. 9, 12, 14 & 15 evidence
Tamper-evident audit SHA-256 hash chain
MCP specification JSON-RPC aware
SOC 2 Controls designed, audit not started
Why Aegis

Deterministic safety at the moment of execution.

Guardrails that ask a second model for permission inherit that model's failure modes. Aegis decides in code — the same input always produces the same verdict, and every verdict is attributed to a versioned ruleset in a tamper-evident audit trail.

Every layer protected Prompts, tool arguments, tool outputs, and model responses in one pipeline.
2.9 ms rail overhead Measured p95, in-process. Full tool and MCP inspection adds 14 ms p95 against a 50 ms budget.
0 SDK rewrites Point an existing OpenAI-compatible client at Aegis. Base URL and key, nothing else.
Tamper-evident proof Hash-chained audit trails, each entry attributed to the ruleset version that produced it.
Stage 01 • Untrusted Data Ingestion

Indirect injection enters through data, not just chat prompts.

When an agent ingests emails, support tickets, PDFs, and database records, hidden adversarial instructions attempt to hijack agent behavior before a human or basic text filter notices.

Explore Input Rail defenses
Comprehensive AI Defense

See the complete execution chain. Block the risky operations.

Built for enterprises that require deterministic security boundaries without sacrificing developer velocity.

Tool & MCP Firewall

Authorize the action, not just the output.

Apply granular least-privilege policy to every tool, MCP server, parameter, and file path. Dangerous operations halt before execution — not after the damage is logged.

search_knowledgebaseAllow
db.query /support-ticketsAllow
fs.read /etc/shadowDeny
wire_transfer --amount=250000Deny
Live Decision Radar

Real-time visibility into every agent action.

Allow and block verdicts across tenants, rulesets, latency budgets, and active tool calls — streamed as they happen.

Decisions / hr1,429
Held actions184
p95 rail guard2.9 ms
p95 tool guard14 ms
Verified traffic Neutralized attacks

Sample data shown. Your console streams live per-tenant figures.

Drop-in Gateway

One line to enter the execution path.

Keep your existing SDKs, agent frameworks, and models. Swap the base URL and start enforcing immediately.

Tenant Isolation

Zero cross-tenant data leakage.

Dedicated tenant keys, scoped RBAC policies, separate audit channels, and isolation enforced in the access layer itself.

Cryptographic Evidence

From runtime decisions to defensible compliance.

Export immutable hash-chained logs, stream CEF or NDJSON straight into your SIEM, and map every verdict to the OWASP LLM Top 10, the EU AI Act, NIST AI RMF and MITRE ATLAS.

See the export formats
Input rails passed Tool scopes verified Hash chain sealed SIEM event forwarded
Where others stop

Prompt filters read the conversation. Aegis authorizes the action.

Text classification is the easy half of the problem. The damage happens at the moment an agent calls a tool — so that is where the boundary has to be.

6 checks Before any tool runs Name deny-list, default-deny, least-privilege constraints, dangerous-action detection, argument scanning, and tool-result validation — evaluated in that order, first denial wins.
Streamed Tool calls, not just text Tool arguments are reassembled and evaluated mid-stream, closing the bypass that naive proxies leave open when a call arrives token by token.
Versioned Every verdict is attributable Each decision records the exact ruleset hash that produced it, so an audit six months later reproduces the same answer instead of re-litigating it.
Frictionless Deployment

Drop Aegis in the path. Keep everything else.

Integrate in under 60 seconds with native support for Python, TypeScript, cURL, LangChain, and CrewAI.

  1. 01

    Point Your Existing Client

    Change your client's base URL and API key. No changes to prompt templates or agent tools required.

  2. 02

    Configure Policy Boundary

    Define allowed tool scopes, parameter limits, path constraints, and default-deny policies.

  3. 03

    Enforce & audit in real time

    Safe traffic flows through in milliseconds. Unauthorized actions are intercepted and recorded in the audit chain.

See every framework and protocol we support
from openai import OpenAI

# Point your client to Aegis gateway
client = OpenAI(
    base_url="https://aegisapi.graffitecs.com/v1",
    api_key="aegis_sec_live_98a72b",
)

response = client.chat.completions.create(
    model="gpt-4o",
    messages=messages,
    tools=tools,
)

# Every action and tool call is deterministically verified
✓ Execution Rail Active • Zero SDK Modifications 2.9 ms p95
Tailored Solutions

One unified platform. Clear guarantees for every stakeholder.

Security teams & CISOs

Define deterministic boundaries, halt destructive agent commands, and investigate tamper-evident incident logs.

Security architecture

AI engineers

Ship agentic applications without boilerplate guardrail code or orchestration rewrites.

Product features

Platform & SecOps

Deploy on Kubernetes via Helm with multi-tenant OIDC SSO and native Prometheus/OTel metrics.

Integrations

Compliance & legal

Generate reports mapped to the OWASP LLM Top 10, EU AI Act obligations, NIST AI RMF and MITRE ATLAS, with verifiable proof.

Compliance mapping
Ready for Production

Give every AI agent action a verifiable security boundary.

Join our design-partner pilot for dedicated onboarding, custom policy authoring, and direct roadmap access.

Zero SDK rewrite OpenAI compatible Dedicated engineer onboarding SOC 2 controls designed