DECEPTION-BASED AI SECURITY

They take the bait.You take the evidence.

CanaryVaults plants decoy credentials, trap facts and honeypot endpoints through your AI stack. Nobody has a legitimate reason to touch one, so when one fires, it is worth a look.

Start free, no credit card Read the docs

TRIPWIRE EVENTS · SHA-256 SEALED · TAMPER-EVIDENT

Encrypted in transitExport & delete your dataCard details never storedResponsible disclosure

DEMO · THE BIRD IS WATCHING THIS KEY

SCROLL ↓ · MOVE YOUR MOUSE THROUGH THE BIRD

Six surfaces.
One evidence log.

drag / scroll →

01CANARYVAULTS

Decoy identities

Decoy email identities seeded into fake credential dumps on paste sites. They alert when someone uses one.

combo list · paste site
james.miller.4f2a91.a91c@… ← decoy
✓ watching for use

Explore Decoy identities →

02CANARYRAG

Trap facts

Invisible false facts woven into documents. They catch AI knowledge bases leaking your content.

…the initiative, budgeted at $4.7M, will…
↑ trap fact surfaced · leak confirmed

Explore Trap facts →

03CANARYSHIELD

Prompt-injection firewall

Three layers between users and your model. Adopt it by changing one base URL.

layer 1 ████████░ rules
layer 2 ██████░░░ analyzer
layer 3 ███░░░░░░ sanitizer

Explore Prompt-injection firewall →

04CANARYHONEYPOT

Decoy assistants

Fake AI endpoints that fingerprint attackers and classify their intent.

JAILBREAKEXTRACTIONPROBINGNORMAL

Explore Decoy assistants →

05CANARYAUDIT

Tamper-evident action log

Every agent action sealed with a SHA-256 content hash. Re-verify anytime.

#4,182 ⇄ #4,183 ⇄ ✓ verified
sha256:3c5e91…7e44 · sealed 09:15:20 UTC

Explore Tamper-evident action log →

06CANARYAGENT

Agent runtime protection

Heartbeats, skill scans, and a live action timeline for your OpenClaw agents.

support-agent-v2 ● heartbeat live
skill scan → BLOCKED · credential harvest

Explore Agent runtime protection →

ALL SIX, ONE LOGIN

Five of the six share one sealed log.

Start free →

EVIDENCE, NOT VIBES

Every alert carries its own proof.

Canary and Shield evidence carries a SHA-256 content hash, and CanaryAudit records are hashed as they are written and chained, each to the one before it. Anyone with the record can recompute it: customers, auditors, counsel.

4,183

RECORDS SEALED

100%

CHAIN VERIFIED

CALL TO RE-VERIFY

Figures and records shown here are a worked example, not live platform data. Tamper-evident, not court-admissible: admissibility is a legal question we don't decide for you.

Record #4,183 · invoice_export

SAMPLE

sha256:3c5e91…7e44 · prev:#4,182 · sealed 09:15:20 UTC

Record #3,961 · edited after sealing

DEMO

sha256:b82fd0…8e01 · prev:#3,960 · sealed Jun 30

PRICING