Skip to main content

Real-time behavioral kill switch for AI agents

Project description

Vaultak

PyPI version License: MIT Python 3.8+ Downloads

Runtime security and behavioral monitoring for AI agents.

Vaultak is the control layer for AI agents in production. Monitor every action, enforce permission boundaries, score risk in real time, and automatically pause or roll back agents before damage is done.

No agent should touch your production systems without it.


The Problem

AI agents are being deployed into production at scale — writing to databases, sending emails, executing code, processing payments. But there is no standard layer that monitors what they are doing, enforces policy, or stops them when something goes wrong.

A misconfigured agent today can cause real damage: deleted records, leaked PII, unauthorized transactions. Vaultak closes that gap.


Products

Vaultak Core Vaultak Sentry
Type Python SDK Desktop App
Integration 2 lines of code Zero code changes
Language support Python Any language
Best for Developers Security teams
Install pip install vaultak Download

Install

pip install vaultak

Requires Python 3.8 or higher.


Quick Start

from vaultak import Vaultak

vt = Vaultak(api_key="vtk_...")

with vt.monitor("my-agent"):
    # your agent code here
    pass

That is all. Vaultak wraps your agent, monitors every action, scores behavioral risk in real time, and blocks or rolls back if a threshold is breached.


Core Features

Behavioral Risk Scoring

Every agent action is scored 0–10 in real time across five dimensions: action type, resource sensitivity, blast radius, frequency, and context deviation. Scores above your configured threshold trigger automatic intervention.

Policy Enforcement

Define what your agent is and is not allowed to do. Block specific action types, restrict access to sensitive resources, or require human approval before high-risk operations execute.

vt = Vaultak(
    api_key="vtk_...",
    policy={
        "block": ["delete", "drop_table", "send_external_email"],
        "require_approval": ["write_production_db"],
        "max_risk_score": 7.0
    }
)

Automatic Rollback

When an agent breaches a risk threshold, Vaultak does not just alert — it rolls back. Actions are logged with full state context so recovery is clean and auditable.

PII Masking

Sensitive data passing through your agent pipeline is automatically detected and masked before it reaches external services or logs.

from vaultak import mask_pii

safe_output = mask_pii(agent_output)
# SSNs, emails, credit cards, phone numbers masked automatically

MCP Gateway Scanning

All Model Context Protocol (MCP) tool calls are intercepted and scanned before execution. Malicious or out-of-policy tool use is blocked at the gateway level.

SIEM Integrations

Push behavioral events and risk alerts directly to your existing security stack.

vt = Vaultak(
    api_key="vtk_...",
    siem={
        "provider": "splunk",  # splunk | datadog | sentinel | slack | pagerduty
        "endpoint": "https://your-splunk-endpoint",
        "token": "your-token"
    }
)

Red Team Testing

Vaultak ships with a built-in red team simulation engine covering 22 attack vectors — prompt injection, jailbreaks, data exfiltration attempts, privilege escalation, and more. Run it against your agent pipeline before deploying to production.

from vaultak import RedTeam

rt = RedTeam(api_key="vtk_...")
results = rt.run(target_agent=my_agent, vectors="all")
print(results.summary())

On-Premises Deployment

For teams that cannot send data to external services, Vaultak ships a fully self-contained Docker deployment.

git clone https://github.com/samueloladji-beep/Vaultak
cd onprem
docker-compose up

All monitoring, risk scoring, and policy enforcement runs locally. No data leaves your infrastructure.


Vaultak Sentry

Sentry is a zero-code desktop daemon that monitors agent activity at the system level — no SDK integration required. Install it, connect it to your Vaultak dashboard, and get full behavioral visibility across every agent running on the machine.

Download: vaultak.com/download

Supports macOS, Windows, and Linux.


Dashboard

Every agent event, risk score, policy trigger, and rollback is visible in your Vaultak dashboard at vaultak.com. Real-time feed, historical audit log, and team-level access controls.


Pricing

Plan Price Best for
Starter Free Individual developers
Pro $49/mo Small teams
Team $99/mo Engineering teams
Business $299/mo Growing engineering orgs
Enterprise Custom from $999/mo Large-scale deployments

Start free — no credit card required.


Documentation

Full documentation at docs.vaultak.com


Links


License

MIT License. See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

vaultak-0.7.0.tar.gz (21.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

vaultak-0.7.0-py3-none-any.whl (21.4 kB view details)

Uploaded Python 3

File details

Details for the file vaultak-0.7.0.tar.gz.

File metadata

  • Download URL: vaultak-0.7.0.tar.gz
  • Upload date:
  • Size: 21.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.9.6

File hashes

Hashes for vaultak-0.7.0.tar.gz
Algorithm Hash digest
SHA256 d34b6e368efbc68c40133ea3b25b70cd08265beecd5fe73db6c58d64dd6896a1
MD5 c8bdb2bf35c1376676e6a3204d4a3214
BLAKE2b-256 5e8d0bf59021c276e023ebd27503b84a1391c9354339ad78ef270c7d69fbc745

See more details on using hashes here.

File details

Details for the file vaultak-0.7.0-py3-none-any.whl.

File metadata

  • Download URL: vaultak-0.7.0-py3-none-any.whl
  • Upload date:
  • Size: 21.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.9.6

File hashes

Hashes for vaultak-0.7.0-py3-none-any.whl
Algorithm Hash digest
SHA256 c550b96867ce731da6eb4521b229c13516f9821d447ebeeae01212b1cd6637af
MD5 46639541c9928f54f331fed768c440d3
BLAKE2b-256 267d5c4917d6eec299d40c5db51f0efa20c0c2f47b89780b745bb471a286a155

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page