New · AI Agent Governance now available

Security for your APIs and AI Agents

Detect attacks on your APIs in real time. Monitor every LLM call your AI agents make. Protect your data before a breach does it for you.

60s
Detection cycle
8
AI threat detectors
100%
On-premise capable
5min
To install
No credit card required
Free tier — no time limit
On-premise deployment available
100% offline detection
Installs in 5 minutes

Two products. Complete security coverage.

ApiSentinel secures your API. AgentSentinel secures your AI. Use one or both — they are designed to work together.

🔐
From $49/month

ApiSentinel

Real-time API security monitoring. Detect BOLA, DDoS rate spikes, brute force, and shadow APIs before they cause damage.

  • BOLA / unauthorised data access detection
  • Rate spike and DDoS anomaly detection
  • Brute force login attack detection
  • Shadow API / undocumented endpoint discovery
  • AI-written monthly security reports
  • Slack + SIEM webhook alerts
Live demo running now
🤖
From $99/month

AgentSentinel

AI agent security and governance. Monitor every LLM call for prompt injection, PII leaks, jailbreaks, and policy violations.

  • Prompt injection detection (15 patterns)
  • Jailbreak blocking in real time
  • PII leakage prevention (13 data types)
  • Data exfiltration signal detection
  • AI cost tracking and spike alerts
  • Monthly governance reports — 100% offline
Live demo running now

Your API is being attacked.
You just don't know it yet.

A 10-line agent snippet installs in any framework. Detection starts within 60 seconds. No security team required.

Four detectors. Every 60 seconds. Zero configuration.

Rate Spike / DDoS

z-score comparison against a 30-day per-minute baseline per endpoint. Unknown attacking IPs caught automatically.

BOLA — Data Theft

Detects when one authenticated user accesses 15+ distinct object IDs on the same endpoint in 120 seconds.

Brute Force Login

20+ failed authentication attempts from one IP address in 5 minutes on any login, token, or auth endpoint.

Shadow API Discovery

Any endpoint not in your approved whitelist that receives traffic. Fires once per 24h per endpoint to avoid noise.

Works with every framework

Node.js / Express
Python / Flask
Python / FastAPI
PHP / Laravel
Ruby on Rails
Go
Java / Spring
+ any HTTP API
View live dashboard → Start free — no card needed

Your AI agents are making hundreds
of LLM calls. Who's watching?

AgentSentinel intercepts every call, runs 8 security detectors in milliseconds, and blocks threats before the model responds — with zero internet required.

8 detectors. Every LLM call. 100% offline.

Prompt Injection

15 patterns covering instruction override, system prompt extraction, DAN attacks, and delimiter injection.

Jailbreak Blocking

7 patterns. The only detector that blocks calls in real time before the LLM ever sees the request.

PII Leakage

13 types: email, phone, SSN, credit cards, Aadhaar, IBAN, API keys, AWS keys, JWTs, date of birth.

Data Exfiltration

Detects prompts requesting bulk data dumps, credential exports, and mass data extraction.

Shadow Model Usage

Every model call compared against an approved registry. Wildcard patterns. Unapproved models flagged.

Cost Spike Detection

Offline cost table for 14 major models. Per-agent statistical baseline. Fires when spend exceeds 5× normal.

Runaway Loop Detection

Agents making 50+ calls per minute flagged as potential infinite loops before costs spiral.

Policy Engine

8 default governance rules. Toggle individually. Change any from flag to block. Extendable for compliance.

Drop-in SDK wrappers

OpenAI
Anthropic / Claude
LangChain
Ollama / Local LLMs
LlamaIndex
Azure OpenAI
+ any HTTP endpoint

🔒 100% On-Premise. Zero internet required.

✓ All 8 detectors run on local patterns — no external calls
✓ Governance reports generated fully offline
✓ Raw prompt content never written to database
✓ SQLite — no database server required
View live dashboard → Start monitoring your agents

One prevented breach pays for years of coverage.

$4.45M

Average cost of an API data breach

IBM Cost of Data Breach Report 2023

$2.5M+

GDPR fine at 4% of annual revenue

For a $62M ARR company

$1,788

ApiSentinel Pro for 12 months

12 × $149/month

2,000×

Return on investment at first prevented breach

Conservative estimate

Alfasentinel pays for itself the moment it prevents its first incident.

Live in 30 minutes.
No DevOps. No setup calls.

Pick a plan, get your license key, deploy to Railway or your own server, and connect your first client. The entire flow is self-serve.

1

Choose a plan and get your license key

Select the plan that fits your needs. You receive a license key by email within 60 seconds. No credit card for the free tier.

2

Deploy to Railway in 15 minutes

Upload the project to GitHub, connect Railway, add three environment variables. Dashboard goes live automatically.

3

Connect your first client in 10 minutes

Copy one agent file into their codebase. Add two environment variables. Traffic appears in your dashboard immediately.

4

Detection starts automatically

All detectors activate the moment traffic flows. No configuration required. Alerts fire within 60 seconds of the first anomaly.

What's in the box

✓ Server-side application (Python/Flask)
✓ Pre-built agent SDKs (Node.js, Python, PHP)
✓ Live web dashboard (no install)
✓ License key management CLI
✓ Deployment guide (step-by-step for Mac)
✓ Client integration guide
✓ Demo simulator with 4–6 attack scenarios
⚡ Need it running now?

Both live demos are running right now on Railway. Click to explore the actual dashboards with live data.

Simple, transparent pricing.

Start free. No credit card. Upgrade when you need more. Break-even at your very first paying customer.

Monthly
Annual Save 20%
Free
$0/month
Try it with no commitment. No credit card.
  • 3 APIs monitored
  • 7-day alert history
  • Rate spike + shadow API detection
  • Live dashboard
  • BOLA + brute force detection
  • AI monthly reports
Pro
$149/month
Unlimited APIs. SIEM integration. 90-day history.
  • Unlimited APIs
  • 90-day alert history
  • All 4 detectors active
  • AI-written monthly reports
  • Slack + SIEM webhook
  • API access
Enterprise
Custom
On-premise. Custom SLA. Dedicated support.
  • Unlimited APIs
  • 365-day history
  • On-premise deployment
  • Custom SLA
  • Dedicated support
  • All Pro features

ApiSentinel + AgentSentinel together

API security and AI agent governance in one sales motion. Ask about bundle pricing when you contact us.

Security that actually installs.

★★★★★

"We had a BOLA attack running for 3 days before we discovered it through a customer complaint. ApiSentinel would have caught it in 60 seconds. The setup literally took 8 minutes."

R
Rohan M.
CTO, FinTech startup
★★★★★

"AgentSentinel caught a developer accidentally pasting customer SSNs into a GPT-4 prompt on day two. The PII detection is genuinely impressive. Zero configuration."

S
Sarah K.
Head of Engineering, SaaS platform
★★★★★

"The governance reports are exactly what our CISO needed. Monthly AI usage, cost tracking, policy violations — all in one document. And it runs completely offline."

A
Amir T.
VP Security, Enterprise software co.

Common questions.

ApiSentinel monitors traditional HTTP API traffic — it detects BOLA attacks, DDoS rate spikes, brute force login attempts, and undocumented shadow API endpoints. AgentSentinel monitors AI agent LLM calls — it detects prompt injection, PII leakage, jailbreak attempts, shadow model usage, and governance compliance. They solve different problems and work best together.

No. AgentSentinel works 100% on-premise with zero internet connectivity required. All 8 detectors run on local regex patterns and statistical baselines. Governance reports are generated using an offline template. No prompt content, response content, or personal data ever leaves your infrastructure.

ApiSentinel deploys to Railway in about 25 minutes following the deployment guide. The client agent installs in under 10 minutes using any of the provided SDK files (Node.js, Python Flask, FastAPI, PHP). AgentSentinel follows the same deployment process. From zero to live dashboard: approximately 30 minutes for each product.

Yes. ApiSentinel free tier covers 3 APIs with 7-day alert history and two detectors. AgentSentinel free tier covers 2 AI agents with 7-day history and basic detection. Both free tiers are permanent — no time limit, no credit card required. You can also explore both products using the live demo dashboards linked on this page.

AgentSentinel works with any LLM provider: OpenAI (GPT-4, GPT-3.5), Anthropic (Claude 3.5, Claude 3), Google (Gemini), Meta (Llama), Mistral, and any custom or on-premise model (Ollama, vLLM, LM Studio). Drop-in SDK wrappers are provided for OpenAI, Anthropic, and LangChain. Any other framework can use the generic HTTP reporter.

After completing your order you will receive an email from hello@alfasentinel.io within 60 seconds containing your license key, your API key, and links to the deployment guide and integration documentation. The entire onboarding process is self-serve — no setup calls or waiting periods.

Yes. Customers using both ApiSentinel and AgentSentinel can receive bundle pricing. Contact us at hello@alfasentinel.io or use the bundle pricing button in the pricing section above and we will respond within one business day with a custom quote.

Payments are processed securely via Stripe. We accept all major credit and debit cards (Visa, Mastercard, American Express), and bank transfers for annual enterprise plans. All payments are in USD. Invoices are issued automatically each billing cycle.

Start free. No credit card.
Live in 30 minutes.

Join teams protecting their APIs and AI agents with Alfasentinel. Both live demo dashboards are running right now — explore before you buy.

ApiSentinel — live now AgentSentinel — live now

🔐 Protect your APIs and AI agents — start free today