SnoopStopProvable security for AI agents.
AI agents read your email, your database and the open web — and a single malicious message can trick one into sending your secrets out. AgentProof proves, with mathematics, whether that leak is even possible. Not detection. Proof.
Early and honest: we're building this now. We won't claim to protect anyone until we've proven it.
Map the risk. Prove it. Fix it.
Map
Reads an agent's tools — or connects live to an MCP server — and finds every path where untrusted input, secrets and an external sink meet.
Prove
Uses the Z3 theorem prover to answer one question exactly: can secret data ever reach an attacker-controlled output? Safe means provably safe.
Fix
When it's risky, it shows the exact leak path and the smallest set of data flows to cut — and hands you a policy that is verified safe.
The problem
The lethal trifecta
An agent leaks when three powers meet: it reads untrusted input, it can reach secret data, and it can send data out. When nothing separates them, an attacker just asks the agent to mail the secrets out — and it obeys. This is a real, exploited class: Microsoft Copilot's “EchoLeak” (CVE-2025-32711), and agent tooling tricked into leaking tokens and files.
Detection guesses. We prove.
Today's AI firewalls try to detect whether a message is an attack — a statistical guess that produces false alarms and can never promise “never”. AgentProof answers a different, decidable question: if secret data cannot structurally reach a controllable output, then no matter how cleverly the model is manipulated, it cannot leak. That isn't a prediction. It's a proof.
Who it's for
Built for the teams putting AI agents into production.
Anyone wiring an AI agent to real tools — support agents, internal copilots, MCP servers, coding agents — needs to know it can't be turned against them. AgentProof is a developer tool: run it on your agent, get a proof, drop it into CI. It's early and open-source; there's nothing to buy yet, and we won't say we protect anyone until we've proven it on real agents.
Join us
Help build the trust layer for AI agents.
We're a small team building AgentProof in the open, and we're looking for genuinely good people who want to work on a hard, important problem early.
- ✓No corporate résumé needed. Show us something you've built.
- ✓Real roles. Engineering, security research, design, community.
- ✓Our values. Real skill over titles, honesty over hype, shipping over talk.