| What it does | Prompt injection protection for AI agents
| Independent verification for AI agent outcomes
|
|---|
| Stage | Not given
| Startup
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | GB
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Not given
| Hobbyist: free forever with 250 checks/month; Pro: $9/month with 2,500 checks/month, $0.01 per extra check
|
|---|
| Key features | - Scans tool output, documents, web pages and email
- Multi-layered detection cascade with heuristics and deeper analysis
- Policy Studio for rule management and versioning
- Evidence and investigation tools showing detector signals and matched spans
- SIEM export to Splunk, QRadar, Sentinel and Elastic
- Python and TypeScript SDKs
- HTTP API and webhook support
- Mandatory two-factor authentication
- Knowledge bucket scanning for RAG pipelines
| - Independent outcome verification with VERIFIED, FAILED, or UNKNOWN status
- First-party adapters for Stripe, GitHub, Linear, Sentry, Resend, and HTTP endpoints
- MCP integration with Claude Code, Cursor, and any MCP host
- GitHub Actions required check that fails on unverified claims
- Audit trail storing claims, evidence, and verdicts separately
- Capability inspection before agents call tools
- Read-only credential access with AES-256-GCM encryption
- Continuous monitoring with watches every 5-10 minutes on Pro plan
- Evidence retention for 7 days on Hobbyist, 1 year on Pro
|
|---|
| What makes it different | - Same detection quality across all plans—no features held back at lower tiers
- Transparent benchmarking with published methodology and confidence intervals
- Model-agnostic, provider-agnostic architecture works with any AI model or framework
- In-process detection with 23 ms median latency on default engine
- Free tier with 5 million characters per month, no card required
| - Refuses to guess: returns UNKNOWN rather than false positives when evidence is unreachable
- Neutral gate between agent execution and success verification
- Runs the same way in production as in development
- Never needs write access, only reads authoritative state
- Structured audit trail for debugging and agent evaluation
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | 2 ● no change since last check |
|---|
| Trust Flow (Majestic) | 0 | 1 |
|---|
| Citation Flow (Majestic) | 0 | 23 |
|---|
| Referring domains (Majestic) | 0 | 14 |
|---|
Tawa Guard
DidWork