Tune how Shadow Warden inspects every AI request before it leaves your perimeter.
Async ML detection layer using all-MiniLM-L6-v2 embeddings. Catches paraphrased jailbreaks that regex rules miss.
Auto-generate new detection rules from blocked attacks via Claude Opus. Hot-reloads without restart.
Never log request content. Only metadata (type, length, timing) is persisted. Required for EU deployments.
Tradeoff between false-positive rate and recall. Balanced works for most workloads.
Hard cap on requests per key per minute. Above 1,000 may require dedicated Redis.
Per-tenant keys with SHA-256 constant-time compare. Fail-closed — service won't start without a valid key.
Active Keys
sw-key-•••••••••••••••••••••••••••••••• sw-key-•••••••••••••••••••••••••••••••• Change Password
Store encrypted secrets at rest (Fernet). API keys, tokens, connection strings — CRUD via REST and portal UI.
Secrets
0 secretsNo secrets yet. Add your first secret above.
Add Secret
VAULT_MASTER_KEY before storage. The plaintext is never persisted. Access via GET /settings/secrets returns metadata only.Tune risk thresholds, iteration caps, and toggle AI agent modules. Changes hot-reload via env injection — no restart needed.
Risk Thresholds
Agent Modules
Push security events to external services in real time.
Connected Integrations
Manage regex and semantic rules. Auto-generated rules from the Evolution Engine appear under the Auto-generated tab.
Detection Rules
153 activeManage who has access to your Shadow Warden workspace.
Members
5 membersManage your subscription, usage, and payment history.
Current Plan
Manage Subscription ↗Enter your Lemon Squeezy Customer ID to load your subscription details.
Find your Customer ID in your Lemon Squeezy order confirmation email.
Payment History
| Date | Plan | Amount | Status | Invoice |
|---|---|---|---|---|
| Jun 1, 2026 | Pro — Monthly | $69.00 | Paid | |
| May 1, 2026 | Pro — Monthly | $69.00 | Paid | |
| Apr 1, 2026 | Pro — Monthly | $69.00 | Paid |
Cancel Subscription
Your plan stays active until the end of the current billing period. All data is preserved.
Cancel via Billing Portal ↗Agentic Commerce — Budget Guardian, multi-agent procurement, USDC/WAT payment rails. (v7.0 · CM-40)
Budget Guardian
Payment Rails
Semantic Budget Model
Budget Guardian reads MTD spend from the ai_spend Semantic Layer model.
Voice-Commerce Agents — real-time STT/TTS for M2M negotiation sessions. (v7.0 · VC-01)
Voice Session Config
Run every voice transcript through the 9-layer filter before processing.
Voice Modules
POST /voice/session. Audio is transcribed locally, filtered by Warden, then discarded. Only the transcript metadata is stored.Real-time compliance posture — 19 controls across GDPR, SOC 2, ISO 27001, HIPAA. Cache TTL and gap alerting. (v7.0 · CP-30)
Posture Refresh
Default 300s. Lower values increase CPU load; minimum 60s recommended.
Active Frameworks
GDPR
6 monitored controls
SOC 2
5 monitored controls
ISO 27001
4 monitored controls
HIPAA
4 monitored controls
Gap Alerts
Cryptographic security controls for M2M trades. Post-Quantum options require Enterprise tier.
M2M Trade Signatures
Applied to every Causal Transfer Proof at the ClearingEngine level.
Require ML-DSA-65 Signatures for M2M Trades
ENTERPRISE
Adds ML-DSA-65 (FIPS 204) hybrid signature to every Causal Transfer Proof. Requires liboqs-python installed in the warden container.
ML-KEM-768 Key Encapsulation (FIPS 203)
ENTERPRISEHybrid X25519+ML-KEM-768 KEM for session key exchange. Shared secret derived via HKDF-SHA256(X25519 XOR ML-KEM-768).
Upgrade to unlock PQC
Post-Quantum Cryptography (ML-DSA-65 + ML-KEM-768) is available on Enterprise tier. Classical Ed25519/X25519 remain active on all tiers.
PQC Status
x402/1.0 USDC nanopayment wallet — pre-funded Circle Gateway balance for search fees and M2M settlement.
Subscription Tier
Pre-funded USDC Wallet
Circle GatewayRecent x402 Transactions
POST /marketplace/action?action=search checks for a
PAYMENT-SIGNATURE header. Deductions are batched into a pending queue
and flushed to the Lemon Squeezy usage-records API at the end of your billing cycle. No per-call on-chain settlement in v1.
Actions here are irreversible. Proceed with extreme caution.
Danger Zone
End your current session. Your data is preserved.
Permanently delete the project and all associated data. Cannot be undone. All data is purged under GDPR Article 17.