DECEPTION-BASED AI SECURITY

The canary sings first.

Decoy credentials, trap facts, honeypot endpoints — planted through your AI stack. An attacker touches one, and you hold the alert and the sealed evidence.

Start free — no credit card Read the docs

TRIPWIRE EVENTS · SHA-256 SEALED · TAMPER-EVIDENT

Supabase AuthEncrypted in transitExport & delete your dataCard details never storedResponsible disclosure

LIVE — THE BIRD IS WATCHING THIS KEY

SCROLL ↓ · MOVE YOUR MOUSE THROUGH THE BIRD

Six surfaces.
One evidence log.

drag / scroll →

01CANARYVAULTS

Decoy identities

Fake email identities planted in sensitive files — they alert the moment they're contacted.

contacts_internal.xlsx
d.marchetti@acme-legal.com ← decoy
✓ watching for contact

Explore Decoy identities →

02CANARYRAG

Trap facts

Invisible false facts woven into documents — catch AI knowledge bases leaking your content.

…the initiative, budgeted at $4.7M, will…
↑ trap fact surfaced — leak confirmed

Explore Trap facts →

03CANARYSHIELD

Prompt-injection firewall

Three layers between users and your model. Adopt it by changing one base URL.

layer 1 ████████░ rules
layer 2 ██████░░░ analyzer
layer 3 ███░░░░░░ sanitizer

Explore Prompt-injection firewall →

04CANARYHONEYPOT

Decoy assistants

Fake AI endpoints that fingerprint attackers and classify their intent.

JAILBREAKEXTRACTIONPROBINGNORMAL

Explore Decoy assistants →

05CANARYAUDIT

Tamper-evident action log

Every agent action sealed with a SHA-256 content hash. Re-verify anytime.

#4,182 ⇄ #4,183 ⇄ ✓ verified
sha256:3c5e91…7e44 · sealed 09:15:20 UTC

Explore Tamper-evident action log →

06CANARYAGENT

Agent runtime protection

Heartbeats, skill scans, and a live action timeline for your OpenClaw agents.

support-agent-v2 ● heartbeat live
skill scan → BLOCKED · credential harvest

Explore Agent runtime protection →

ALL SIX, ONE LOGIN

Every surface reports into the same sealed log.

Start free →

EVIDENCE, NOT VIBES

Every alert carries its own proof.

Each record is chained to the one before it and sealed with a SHA-256 content hash at write time. Anyone with the record can recompute it — customers, auditors, counsel.

4,183

RECORDS SEALED

100%

CHAIN VERIFIED

<1s

TO RE-VERIFY

Figures and records shown here are a worked example, not live platform data. Tamper-evident, not court-admissible — admissibility is a legal question we don't decide for you.

Record #4,183 — invoice_export

SAMPLE

sha256:3c5e91…7e44 · prev:#4,182 · sealed 09:15:20 UTC

Record #3,961 — edited after sealing

DEMO

sha256:b82fd0…8e01 · prev:#3,960 · sealed Jun 30

PRICING