SLA-backed auto-revocation, certificate enforcement, webhook delivery, incident runbooks. 99.9% uptime. Sub-second latency. Built for on-call teams.
Deploy, monitor, and respond — four steps to a fully managed agent lifecycle.
Register via API. Receive X.509 certificate. Configure webhooks for revocation alerts. Set up certificate enforcement in your gateway.
POST /api/v1/agentsReal-time behavioral monitoring. Risk score updates every minute. Pre-warning at 0.75, auto-revocation at 0.85. Custom alerts via webhooks.
GET /api/v1/agents/{id}/riskRisk >0.85 triggers revocation in <60 seconds. Certificate invalid. Webhook fires immediately. Agent cannot execute transactions.
webhooks.on('certificate.revoked')Your gateway checks /api/v1/verify/{cert_serial}. Returns: active, revoked, or expired. Kill switch halts agent execution immediately.
if (cert.status !== 'active') block()<8.76 hours downtime per year. Multi-region failover. Redundant database + cache layers. SLA credits if breached.
Backed by SLA creditsRisk score >0.85 triggers instant revocation. Maximum latency: 60 seconds. Webhook delivered within 5 seconds.
Enforced by circuit breakerPublic /api/v1/verify endpoint: <500ms p99 globally. Cached at CDN edge. No auth overhead. Mission-critical latency.
Monitored via Better StackBehavioral event ingestion capacity per tenant. Rolling 30-day risk window. Real-time score updates. Horizontally scalable.
Scales via QStashCopy-paste playbooks for your on-call runbook. Link to full docs for each scenario.
Agent risk score exceeded 0.85. Webhook received. Check /api/v1/crl for reason. Review audit trail. Contact support if false positive.
Enforcement runbookScore in pre-warning zone. Agent still active but will revoke if trend continues. Investigate anomalies in event stream now.
Event analysisEndpoint returned 5xx or timeout. System retries 3× with exponential backoff. Check your endpoint logs. Re-register if needed.
Webhook guideX.509 cert reached end of 365-day validity. Agent cannot execute. Register new agent, issue new cert, update deployment.
Agent re-registrationRevocation enforcement. Kill switch implementation. Operational playbooks.
Setup. Event types. Delivery guarantees. HMAC-SHA256 signature verification.
CRL access. Revocation reasons. Real-time updates from the CA.
Uptime SLA. Performance SLA. Credits. Incident response times.
Get started
SLA-backed guarantees. Auto-revocation. Webhook delivery. Incident runbooks included.