Your agent passed every eval, but you still cannot prove it is safe to ship.
BASTYN attests the whole agent chain against 23 risk vectors and hands you a signed evidence pack your security and risk teams approve without a meeting.
For the engineers who ship and run AI agents
Find what breaks trust before it reaches production.
BASTYN gives engineering teams hard evidence that an agent is safe to ship, then watches it in production so you catch drift before your users do. Validate the trust and compliance status of an agent before it goes live, or monitor a live agent in real time.
Free Community edition for developers. Upgrade to continuous enterprise assurance when you need production monitoring, conformity evidence and organisation-wide governance.
An agent behaves in production differently from how it behaved in your tests.
Live monitoring streams attested signals from the hot path and flags behavioural drift the moment a decision diverges, not when a user complains.
When something goes wrong you get a vague score, not a place to fix it.
Every finding points to the file, line, and agent trace, with the exact fix and a reproducible test case you can loop straight back into CI.
BASTYN is an assurance engine, not a linter.
BASTYN provides independent Economic Trust Assurance for complete AI systems, helping organisations determine where greater AI autonomy is supported by current evidence.
Our unit of analysis is the whole multi-agent system chain: not a file, not a function, not a single prompt, not just your agent.
An agent's security is emergent. It comes from how the system prompt, the tool definitions, the permission scopes, the data flows, and the runtime behaviour all interact: the controls and the config. A line of code that's harmless on its own can open your attack surface once it's wired to a tool with broad scope and an external data path. We help you find and protect against it.
CLI / Community
- Local testing
- Agent + model checks
- Security tests
- Evidence output
CI/CD
- GitHub / GitLab
- Automated test gates
- Regression testing
BASTYN Assure
- Whole-system assurance
- Continuous monitoring
- Compliance & conformity
- Autonomy governance
- Economic assurance
BASTYN Sovereign is also available for air-gapped installations.
What you get
Pre-deployment evidence pack
A signed report your security and risk teams approve before production, with vector scores, tool-call traces, and reproducible test cases.
Live drift monitoring
Detect behavioural drift in production the moment it happens, with the trajectory and the exact decision that diverged.
Line-level remediation
Every finding points to the file, line, and agent trace, plus the exact fix. No vague summaries.
CI/CD-native gating
Block deployments that fail your trust threshold. Evidence auto-attached to the PR on pass.
Agent · cust-support-07
Cust_Support agent responses outside guidelines
Trust score
96.0/100
Tool use94
Data boundaries89
Prompt integrity97
Decision drift86
How it works
From connecting your agent to routing findings into the systems your teams already run. Every step is gated, attested, and looped back.
STAGE 1
Connect & Attest
SAST + DAST
Connect your repo from the BASTYN web console to trigger a full attestation.
STAGE 2
Certify
23 Risk Vectors
Behavioural trust, compliance & multi-agent risks tested. Trust score assigned.
STAGE 3
Remediate
CI/CD or ITSM
Findings fed directly into your CI/CD or ITSM for fix & retest.
STAGE 4
Drift Monitoring
GitHub app alerts
Identifies and alerts on material risk, revoking the certificate if needed.
STAGE 5
Re-attest
Clean certificate
Remediate and retest for a clean cert. Pipelines gate on a valid Trust cert before deploy.
Build trust into the development lifecycle.
Test agents and AI systems before deployment, reproduce failures, remediate issues and generate the same evidence used by security, risk and compliance teams.
The evidence engineering generates becomes the same evidence used by security, risk and compliance.
Run the playground
5 minutes, no setup
Browser-based environment. Bring a simple agent or use our example. Run bastyn scan ./ and see results instantly. No Docker. Try it first.
Open playgroundInstall the CLI
1 minute
Install bastyn-cli, point it at your agent, get a score and read the report. Done.
pip install bastyn-cli bastyn scan ./your-agent-codeInstall the CLI
Provide access to Bastyn viewer
2 minutes, no CLI
Add our read-only viewer to your repository and we scan your agent straight from GitHub, with no install and no setup.
Drop-in
One command config. Get running immediately.
Install the SDK or run the sidecar alongside your agent. Register the behavioural envelope once. Every prompt, tool call, decision and chain interaction is attested against it from then on, in parallel with the hot path, with no measurable latency added.
- Integrates directly with your existing tooling & pipeline.
- Blocking checks only fire on policy-relevant actions.
- Per-agent, per-chain, per-mandate trace queryable from CLI or API.
- Read-only by default. We never store your agent's data.
bastyn.ts
v1 SDKimport { bastyn } from "bastyn";
// Register the behavioural envelope once.
const guard = bastyn.attest({
agent: "cust-support-07",
mandate: "ap2://invoice/*",
});
// Every prompt, tool call & decision is attested
// in parallel with your hot path, no added latency.
guard.wrap(myAgent);One-click integrations
Get findings into the tools your team already lives in. Open one to see the exact command.
One-click integrations
BASTYN scans run in your CLI and GitHub Actions. To get findings into your existing tools, we provide quick integrations.
Deployment approval in minutes
Developers building agents that need sign-off from security or risk before production get an evidence pack reviewers can approve without a meeting.
Monitor live agents
Teams running agents in production detect behavioural drift, get the trajectory and the diverging decision, and loop the fix straight back into CI.
BASTYN feeds signals to the systems where your agents already live.
LangGraphAutoGenCrewAIOpenAI Agents SDKAnthropicMCPA2AAP2x402GitHubServiceNowAppDynamicsDatadogGrafanaGitLabJIRALangGraphAutoGenCrewAIOpenAI Agents SDKAnthropicMCPA2AAP2x402GitHubServiceNowAppDynamicsDatadogGrafanaGitLabJIRA