The secure ecosystem for AI agents that move money.

The secure ecosystem for AI agents that move money.

The secure ecosystem for AI agents that move money.

DETENT

DETENT

DETENT

Security your agents can't be talked out of.

AgentsAgentsarearestartingstartingtotopay,pay,purchase,purchase,settlesettleandandcommitcommitonontheirtheirowners'owners'behalf.behalf.DETENTDETENTisisthetheecosystemecosystemthosethoseactionsactionsliveliveinside:inside:everyeverypaymentpaymentcheckedcheckedagainstagainstyouryourrulesrulesbeforebeforeititsettles,settles,everyeveryattackattackattemptattemptcaughtcaughtandandremembered,remembered,everyeverybigbigdecisiondecisionheldheldforforyouryourownownsignature,signature,andandeverythingeverythingprovableprovableafterwards,afterwards,totoanyone. anyone.
AgentsAgentsarearestartingstartingtotopay,pay,purchase,purchase,settlesettleandandcommitcommitonontheirtheirowners'owners'behalf.behalf.DETENTDETENTisisthetheecosystemecosystemthosethoseactionsactionsliveliveinside:inside:everyeverypaymentpaymentcheckedcheckedagainstagainstyouryourrulesrulesbeforebeforeititsettles,settles,everyeveryattackattackattemptattemptcaughtcaughtandandremembered,remembered,everyeverybigbigdecisiondecisionheldheldforforyouryourownownsignature,signature,andandeverythingeverythingprovableprovableafterwards,afterwards,totoanyone. anyone.

The Problem

Every business wants to hand real work to agents. Almost nobody hands them the money. The reason is simple: an agent believes what it reads. One poisoned instruction, hidden in an email, an invoice or a webpage, and it will wire funds to a thief with total confidence, at machine speed, and afterwards there is not even a record to show how it happened.

Every business wants to hand real work to agents. Almost nobody hands them the money. The reason is simple: an agent believes what it reads. One poisoned instruction, hidden in an email, an invoice or a webpage, and it will wire funds to a thief with total confidence, at machine speed, and afterwards there is not even a record to show how it happened.

So the market protects itself the only way it knows: by refusing to trust.

Platforms cap agents at twenty dollars a day while a human moves thousands.

Platforms cap agents at twenty dollars a day while a human moves thousands.

Companies make people approve everything twice.

Companies make people approve everything twice.

Teams simply refuse to let agents near money at all.

Teams simply refuse to let agents near money at all.

The limits look like policy. They are missing trust.

DETENT was built to close that gap: a place where deception has a ceiling. Spending can never exceed what you allowed. Tricks fail against hard limits instead of judgement. A permanent record survives of every action and every refusal, and the protection grows sharper with every attack tried on any customer. Not smarter agents. A world around agents where being fooled cannot ruin you.

DETENT was built to close that gap: a place where deception has a ceiling. Spending can never exceed what you allowed. Tricks fail against hard limits instead of judgement. A permanent record survives of every action and every refusal, and the protection grows sharper with every attack tried on any customer. Not smarter agents. A world around agents where being fooled cannot ruin you.

Core Capabilities

One ecosystem, not four tools.

The four places your payment passes are not features on a list. They are one system that feeds itself: the wall stops what breaks your rules, every stop becomes a receipt in the ledger, every receipt becomes a lesson in the corpus, and every lesson makes the watch faster at spotting the next attempt, for every customer at once. Point tools do one of these jobs. The reason an ecosystem wins is that each job makes the others stronger, and the whole thing compounds while you sleep.

The four places your payment passes are not features on a list. They are one system that feeds itself: the wall stops what breaks your rules, every stop becomes a receipt in the ledger, every receipt becomes a lesson in the corpus, and every lesson makes the watch faster at spotting the next attempt, for every customer at once. Point tools do one of these jobs. The reason an ecosystem wins is that each job makes the others stronger, and the whole thing compounds while you sleep.

ONE PAYMENT SYSTEM · TWO ILLUSTRATIVE REQUESTSAI agentThe WallYour account*Signing ChamberThe LedgerLearning LayerThe WatchLearning feedbackPayment pathPolicy → human approvalExact payment signedAuthorization recordedNext request refusedRefusal → lesson → WatchRisk signal returns to policy

OUTCOMES

The same payment, twice.

The same payment, twice.

The same payment, twice.

Once in today's world. Once inside DETENT.

Once in today's world. Once inside DETENT.

Once in today's world. Once inside DETENT.

06 / TWO OUTCOMESDETENT
Without DETENTUnprotected exampleAgentRecipientNo boundary2,400 USDC requested−2,400 USDC sentSame poisoned instruction reaches fundsNo verifiable approval in this exampleNo shared learning in this exampleWith DETENTPolicy protects the paymentAgentRecipientThe Wall2,400 USDC requested2,400 USDC retainedUnapproved recipient · payment refusedRefusal creates evidenceEvidence strengthens detectionReceipt → corpus → WatchSame instruction. Different outcomes.

What we offer

Explore The Ecosystem

Explore The Ecosystem

Follow a payment through the five places that keep it honest. Click any of them to go deeper.

Follow a payment through the five places that keep it honest. Click any of them to go deeper.

Your payment has reached the wall.

The Wall

The wall is where your rules become physics. You decide, in plain language, what your agents may spend, to whom, and how fast. Every payment meets those rules before it settles, and the first rule it breaks stops it cold.

01 / ENFORCEDETENT

Your rules, made real.

Every request meets your spending, recipient, and velocity limits.

OWNER POLICYENFORCE BEFORE SETTLEMENTWithin limitsUnknown recipientNeeds a signaturePassDenyHoldYour rules. Every payment.

Allowed requests pass. Broken rules stop. Bigger decisions wait.

01 / ENFORCEDETENT

Your rules, made real.

Every request meets your spending, recipient, and velocity limits.

OWNER POLICYENFORCE BEFORE SETTLEMENTWithin limitsUnknown recipientNeeds a signaturePassDenyHoldYour rules. Every payment.

Allowed requests pass. Broken rules stop. Bigger decisions wait.

02 / DETECTDETENT

See the attempt earlier.

Shared patterns inform detection, outside the payment path.

Known pattern recognisedRisk signal → policyPayment pathThe WallObserves outside the payment path

The Watch sends a risk signal. The Wall enforces the policy.

Off the route, something is watching the route.

The Watch

The watch is the part of DETENT that has already seen the attack coming for you. It studies every attempt made against every customer, day and night, and recognises the tricks before they reach your money.

This one is big enough that a machine's yes is not enough.

The Signing Chamber

Some payments are too big for a machine's yes. The signing chamber holds those until you, personally, approve them, and your approval is bound to that exact payment and nothing else.

03 / APPROVEDETENT

Your signature. This payment.

Approval binds the exact amount and destination.

EXACT PAYMENT2,400.00 USDC2,400.01 USDCTo approved supplier · 0x4a…78e1Amount + destination + owner signatureHeld for your signatureSignature matchesChanged amount. Invalid.

Change one cent and the existing approval no longer fits. Illustrative signature.

04 / PROVEDETENT

Every decision leaves proof.

Permitted payments, refusals, and approvals become evidence.

Decision receiptPAYMENT2,400 USDCVERDICTRefusedREASONRecipient rulerequest · policy · outcomeVerifiable evidence

Illustrative receipt. Evidence can be checked independently.

04 / PROVEDETENT

Every decision leaves proof.

Permitted payments, refusals, and approvals become evidence.

Decision receiptPAYMENT2,400 USDCVERDICTRefusedREASONRecipient rulerequest · policy · outcomeVerifiable evidence

Illustrative receipt. Evidence can be checked independently.

Here is what happened, in writing nobody can rewrite.

The Ledger

The ledger writes down everything, every payment made, every payment refused, every approval given, in a record nobody can quietly rewrite, not even us.

Get Started

Ready to see transaction security live?

Four engineers. A live testnet. Zero customers yet, by design.
The testnet is our product running live on Base Sepolia. No account. Break it and keep the receipts.