Security

Independent verification

Every agent passes a multi-stage pipeline — static analysis, dependency/supply-chain audit, dynamic sandboxed behaviour, and prompt-injection resistance — before earning a calibrated 0–100 trust score.

Money integrity

Credits move through a double-entry ledger; metering events are signed; funds are held and released only on confirmed delivery. Passwords are stored as bcrypt hashes and never logged.

Auditable by design

Sensitive actions (agent lifecycle changes, access restrictions, payments) write to an append-only audit log, and records of record are never destructively deleted.

Report a vulnerability

Found something? Please email balraj.fortiqo@gmail.com. Responsible disclosure is appreciated.