Injection firewall
A regex fast path sheds high-volume attacks at zero ML cost; an embedding-based semantic classifier judges the subtle ones. Three operating modes tune recall against false positives.
AI agent security · 3-Layer Defense-in-Depth
Your agent holds a wallet.
Your agent holds a wallet.
One bad prompt shouldn't empty it.
Sub-millisecond Edge AI Firewall, Mera Passkey PRF hardware-bound sealed memory enclave, and Monad PolicyGuard execution containment on Parallel EVM.
99.0% AdvBench strict|41.88 ms p95 under attack|207/207 Hardhat tests|1,490+ Python suites
guardian://gate/live-demo
awaiting input
Architecture note: This sandbox demonstrates the fast-path screening and client-side de-obfuscation layers (Layer 1 & 2 of 4). The full 4-layer production pipeline — including semantic embedding classification, output DLP/redaction, and on-chain Merkle anchoring — runs server-side.
Prompt injection
Base64 payload
Braille steganography
Morse encoding
ROT13 wrapper
Homoglyph swap
Hex payload
Approval phishing
System-prompt leak
PII egress
XSS in response
99.0%
AdvBench block rate · strict
benchmark run · aug 2026
41.88 ms
p95 latency while blocking
chaos report · aug 2026
40+
real-time security controls
in one gateway pass
10/10
OWASP LLM Top 10 (2025)
risks covered · test snapshot
DISCLOSURE: Compliance and audit artifacts are internally verified empirical test suites (3,211 prompts across 8 corpora, 1,490+ Python & 207 Hardhat tests, 184 Mera Passkey PRF assertions), not third-party statutory certifications.
Threat model
Four layers between your agent and a bad day.
Each layer is independently tested and artifact-documented. Together they close the attack classes that ship in the wild today.
De-obfuscation engine
Morse, Braille steganography, Base64, hex, binary, ROT13, homoglyphs — normalized before classification so payloads can't hide behind an encoding layer.
Output guardrails
Responses scanned before egress: PII redacted, XSS/SQL/shell fragments blocked, system-prompt leakage caught, optional watermarking applied downstream.
Fail-closed operations
Rate limiting that closes instead of opens under failure, chaos-tested degradation, and SLO checks that run in CI — when parts die, the gateway fails safe.
One control plane
Security off-chain. Trust on-chain.
The execution layer decides in milliseconds whether traffic is safe. The trust layer makes an agent's identity and track record independently verifiable.
off-chain // execution security
- Fast-path screen — heuristics shed obvious attacks before any model inference
- Semantic firewall — embedding classifier, strict / balanced / permissive modes
- De-obfuscation pass — encodings decoded and normalized before judgment
- Response guardrails — redaction, payload blocking, watermarking
- Metering & limits — per-tenant tiers enforced fail-closed
For AI & Platform Engineers:
Sub-millisecond gateway proxy sits seamlessly in front of OpenAI, Anthropic, Ollama, or vLLM — zero changes to your agent reasoning code.
on-chain // trust suite
- ERC-8004 identity & Identity Gate — portable agent registry and pre-flight point-of-interaction enforcement with hot-wallet collision guards
- PolicyGuard & ThreatConsumer — Monad Parallel EVM execution containment & Chainlink oracle threat consumer
- Soulbound passport — ERC-5192 reputation score (0–10000) derived from verified scan history
- Evidence anchoring — Merkle roots over security-event logs (simulated default; Monad testnet opt-in)
- Insurance certificates — cryptographic evidence packages for underwriters and compliance audits
- Interlock registry — explicit agent-to-agent authorization rules (no silent handshakes)
Plain English for Security Teams:
Every action your agent takes is logged, hashed, and provable after the fact — so when something goes wrong, you're not debugging from vibes.
Evidence
Numbers with receipts. Including the ugly ones.
Every figure on this site cites its dated repository artifact — and the proof page publishes full benchmark tables, not just highlights.
Benchmarks →
3,211 prompts across 8 public datasets, August 2026. AdvBench 99.0% strict, JBB PAIR+GCG 98.7% — and Do-Not-Answer's 57.1% published too, because selective reporting is how trust dies.
Audit status →
External pentest completed March 2026 (Independent Security Review, zero open critical/high findings). Internal off-chain, contract, and senior architecture audits remediated July–September 2026, including September 2026 Metropolis & Mera Passkey PRF enclave hard audit (166/166 assertions, 0 collisions).
Chains & identity →
Eleven-contract suite deployed on Monad Testnet. State anchoring runs simulated-by-default. Zero mainnet claims — verifiable directly on block explorers.
Interactive Control Plane
Explore the live protocol.
Explore the live protocol.
Five tabs. Full visibility. Zero setup.
Launch the GuardianAI Dashboard directly at https://aiguardian.dev/explorer to inspect real-time agent telemetry, test policy containment, simulate rogue actions, and inspect immutable audit logs.
TAB 01
CONTROL
Home & Actions
Simulate guarded vs. rogue agent transactions. Test real-time Privy TEE containment, session caps, and Monad testnet execution.
Launch Home Tab ↗
TAB 02
TELEMETRY
Real-Time Dashboard
Live threat stream via WebSockets, Envio indexer metrics, attack vector distribution, and millisecond latency graphs.
Launch Dashboard Tab ↗
TAB 03
DEFENSE
Guardrails & Policy
Create and deploy custom execution constraints, spending limits, target address whitelists, and containment rules.
Launch Guardrails Tab ↗
TAB 04
IDENTITY
Agent Directory
Inspect registered autonomous agents, ERC-8004 identity gates, soulbound reputation scores, and session key delegations.
Launch Agents Tab ↗
TAB 05
AUDIT
Immutable Audit Logs
Cryptographically anchored audit log stream. Filter events by severity, path, risk score, and on-chain transaction hash.
Launch Logs Tab ↗
LIVE APP
DASHBOARD
Open Full Dashboard
Runs directly in your browser with full tab navigation. Test real-time security primitives on Monad Testnet.
Open Dashboard ↗
Get started
Don't wait for an exploit to audit your agents.