Early access
Runtime security for AI agents
Aegisora sits at the execution boundary of autonomous systems. Every sensitive action is evaluated against context, policy, risk and authorization before it reaches the real environment.
Evaluate your first actionThree decisions
Allow. Block. Escalate.
Every request returns one of three decisions. Without a matching policy the workspace default applies, which is BLOCK.
Read the quickstartEvidence
Verifiable by design
Every decision returns an evidence hash you can verify later, so you can show what was decided and why.
Developer docsLive decision console
Every action gets a decision
Agents send the action they want to take. Aegisora evaluates it against policy, risk and authorization before it reaches the real environment.
Evaluate your first action- ALLOW
crm.read_ticket
support-agent · Within scope
- ESCALATE
payments.transfer $48,000
finance-agent · Above approval limit
- BLOCK
db.drop_table users
code-agent · Destructive action denied
- ALLOW
deploy.rollback prod
ops-agent · Policy match
Start building
Everything you need to put a decision point in front of your agents, from a single API call to a scoped pilot.
Developer docsAegisora Runtime
Learn about the platformBuilt for security teams that need proof, not promises.
Policy engine
Write policies once and enforce them on every agent action, with conditions and redaction built in.
hr-agent · Sensitive data class
ops-agent · Policy match
code-agent · Destructive action denied
Illustrative decisions
One decision point for every agent action.
Read the quickstartIntercept
Every sensitive agent action is captured at the execution boundary, before it touches a real system.
Evaluate
Context, policy, risk and authorization are checked together, deterministically, on every call.
Decide
The runtime returns ALLOW, BLOCK or ESCALATE. Escalations route to a human approver.
Put a decision point in front of your agents today.
Start today
Evaluate your first agent action
Create a test workspace, send one request and read the decision. Without a matching policy the default is BLOCK.
curl -X POST https://www.aegisora.org/api/v1/evaluate \
-H "Authorization: Bearer aeg_live_..." \
-H "Content-Type: application/json" \
-d '{ "agent": "finance-agent",
"action": "payments.transfer",
"context": { "amount": 48000 } }'
# -> { "decision": "ESCALATE", "approval_required": true }More information