Inspected at every hop — in, and out.
A deterministic path every agent request takes — five stages, one service, entirely inside your network. Fail-open on infrastructure, sub-second added latency.
Identify
Auth, rate & budget.
Inspect
Injection, poisoning, tool abuse.
Route
Provider & failover.
Restore
De-tokenize, egress scan.
Record
Crypto audit → store.
Who is asking, and can they?
Every request is authenticated, rate-limited, and budget-checked at the door — before a single token is spent. Identity flows through to per-agent policy and the audit record.
- API-key, mTLS, or SSO-backed agent identity
- Per-tenant and per-agent rate & budget enforcement
- Cedar-style policy evaluation in the hot path
Every surface, every attack — in real time.
Each surface an agent touches carries its own attack: prompt injection and jailbreaks, poisoned documents through RAG, malicious or 'toxic-combination' tool and MCP calls, memory poisoning across a session, unverified trust between agents, and data exfiltration on the way out. SHASHU — our purpose-built forensic engine — inspects every one of them and learns each agent's normal behavior. Deterministic regex and DLP are the fast baseline underneath; SHASHU catches the behavioral attacks they can't see.
- Prompt injection, jailbreaks & RAG poisoning — detected
- Malicious & toxic-combination tool / MCP calls — scoped
- Self-healing scrutiny: NORMAL → ELEVATED → STRICT, automatically
- Benchmarked to OWASP LLM Top 10, MITRE ATLAS & NIST AI RMF
To the right model, every time.
Once a request clears inspection, TrustGate routes it to the chosen provider with automatic failover — OpenAI, Anthropic, Bedrock, Azure, or your self-hosted models — behind one OpenAI-compatible endpoint.
- Multi-provider with health-aware failover
- Drop-in OpenAI-compatible — no app changes
- Self-hosted & GPU model targets supported
Clean on the way out, too.
The response is de-tokenized to restore real values, scanned for PII leakage and exfiltration, and run through egress forensics — so what leaves the model is as governed as what entered it.
- Reversible PII tokenization restored in-response
- Output scan for leakage & data exfiltration
- Egress forensics on every response
A trail you can actually prove.
Every request is written to a cryptographically chained, tamper-evident audit trace — then streamed and stored where you choose. Evidence your auditors and procurement team can verify, not just trust.
- Cryptographically chained audit records
- Stream to SIEM · store in your own bucket
- Export-ready evidence per framework
Built to sit in the hot path.
One service in your VPC, designed so security never takes your agents offline.
See the pipeline on your own traffic.
Deploy the open core in three commands, or book a walkthrough with our team.