Govern every tool call. Inspect every prompt. Ship AI with confidence.
Igris sits at every layer of your AI stack, governing every MCP tool call, inspecting every LLM prompt, and giving security teams a single audit-ready dashboard.
One layer between your agents and everything they touch.
Watch three concurrent requests pass through Igris in real time. Same agent, same SDK call, three different verdicts.
Security that lives inside your AI stack.
One SDK, one dashboard, one audit trail. Drop Igris between your agents and the world. Every call, prompt, and response is now governed.
Runtime governance
Sentinel sits between your agent and MCP. Deny-by-default policy, encrypted credential injection, complete audit log.
LLM firewall
Guard inspects every prompt and response. PII redaction, injection detection, content policy, all inline.
Unified observability
Lens streams every event from every product. Filter, search, replay, export. Built for engineers and CISOs alike.
Incidents & session kill-switch
Denials, redactions, and policy violations roll up into a single incidents view. Suspend any session in one click.
Spend guardrails
Per-agent token and tool budgets enforced inline. Cap runaway loops before they bill. Alerts when usage trends hot.
Anomaly detection
Sentinel baselines normal agent behavior and flags drift. Unusual tool sequences, volume spikes, and off-hours access surface instantly.
Three integrated products. One security posture.
Each product works standalone. Together, they share a common telemetry layer that feeds Lens, so every denial, redaction, and tool call is audit-ready.
Every MCP tool call, governed at the source.
Add the SDK to your agent. Define deny-by-default policies. Inject credentials. Block unauthorized calls in real time.
- SDK-first: one function call, TypeScript / Python / Go
- Metadata-based policy engine, deny-by-default
- AES-256-GCM credential vault, per-key allowlists
- Real-time blocking + session kill-switch
- Token usage tracking, complete audit trail
policy: redact-and-pass · delivered ✓
Inspect every prompt and response. Block what shouldn't pass.
Guard is a transparent proxy between your users and any LLM. Detect prompt injection, redact PII, enforce content policy, and apply user-level rate limits.
- Transparent proxy, no provider changes
- PII redaction + prompt-injection detection
- User-level rate limits, per-connection
- Form-based policy builder, no DSL required
- Audit log of every flagged prompt and response
Every event, every product, in one dashboard.
Lens aggregates logs, traces, denials, and anomalies from Sentinel and Guard into one real-time stream. CISOs get risk heatmaps. Engineers get trace-level debugging. Compliance gets one-click audit reports.
- Unified event stream with filter & search
- Slack, Discord & webhook alerts on incidents
- KPI dashboards for tool calls, denials, spend
- Audit trail with retention by tier (10–365 days)
From zero to governed in 3 steps.
Install the SDK, create a connection in the dashboard, route your calls through it.
Install the SDK
One command. TypeScript SDK, OpenAI-compatible interface.
$ bun add @igris-security/sdk import { Igris } from "@igris-security/sdk"; const igris = new Igris({ apiKey: process.env.IGRIS_API_KEY, });
Create a connection
In the dashboard: Governance → Connections → New Connection. Pick a provider, give it a slug, paste your upstream key.
- TypeLLM
- Provideropenai
- Slugopenai-prod
- API keysk-•••8a4f
API key is encrypted at rest (AES-256) and never returned in any API response.
Govern every call
Use the OpenAI-shaped chat completion. The @<slug>/<model> prefix routes through the firewall.
const res = await igris.chat.completions.create({ model: "@openai-prod/gpt-4o", messages: [{ role: "user", content: "Summarize SOC 2." }], }); // → Prompt scanned (PII, secrets, injection) // → Policy enforced // → Credentials injected // → Rate-limited (req / tokens / dollars) // → Audit trail logged
Ship AI without shipping risk.
Join teams using Igris to enforce runtime policies and maintain full visibility over their AI operations.