The Leviathan, guardian of the platform

Northstar Production Studio · Leviathan Platform

The security control plane for autonomous agents.

Leviathan governs every consequential action your agents take, plants deception attackers can't tell from the real thing, and records what actually happened into an evidence log nobody — including us — can quietly edit. Self-hosted. No telemetry leaves your network.

1,225 Python tests passing 151 .NET tests passing Self-hosted — your infrastructure, not ours Hash-chained evidence log

The core of the platform

Six systems that govern, watch, and remember what your agents do.

Each one ships as part of Leviathan Platform, and several are also available standalone — see the full roster below.

Govern

Agent Firewall

Every consequential action — read CRM, send email, execute shell, export data — passes through an explicit policy decision before it happens. Iron-Thread, the egress firewall underneath it, blocks unauthorized outbound connections at the interpreter level before they ever leave your infrastructure.

READ CRM✓ ALLOW
SEND EMAIL○ CONFIRM
EXECUTE SHELL✕ DENY
EXPORT DATA✕ DENY
Part of Agent Guardrails — $2,000/yr →
Govern + Detect

MCP Gateway

Trust the tool, pin the schema. Every MCP tool description is scanned for injection before admission, then hashed and pinned — a re-admission from the same server with a changed description gets flagged, not silently trusted. $4,000/yr standalone.

GitHubAPPROVED
SlackMODIFIED
AWSAPPROVED
MCP Gateway — $4,000/yr →
Detect

RAG & Memory Defense

Your knowledge base is part of your attack surface. Every retrieved chunk and every candidate memory write is scanned before it's trusted — at BOTH checkpoints that matter, admission and recall, closing the exact gap real 2026 memory-poisoning research (GhostWriter, MemMorph) targets.

DOCUMENTcustomer_handbook.pdf
RISKPROMPT INJECTION
STATUSQUARANTINED
Part of Agent Guardrails — $2,000/yr →
Deceive

Deception Network

20 honeytoken traps for the places attackers actually go after a foothold: cloud metadata endpoints, a stolen kubeconfig, a leaked SSH key, a poisoned Postman collection, a scraped RAG corpus, a decoy MCP server, and more — all real, all in production, all self-hosted.

AWS IMDSplanted
Kubeconfigplanted
SSH keyfree forever
Decoy Kit — free to $4,000/yr →
Prove

Flight Recorder

Prove exactly what happened. Every meaningful action becomes a hash-chained, append-only evidence event — tamper-evident by construction, exportable for a compliance review or handed straight to an incident responder.

#10293 8af1c... #10294 97c2b... #10295 a91d7...
Amber-Freeze — $3,000/yr →
Improve

Continuous Red Team

A real adversarial-mutation harness runs social-engineering and injection scenarios against your own agents on every change, and a regression gate fails the build if a previously-closed gap reopens — not a one-time pentest, a standing test suite.

SCENARIOauthority-escalation
EXPECTEDDENY
RESULTCAUGHT ✓
Probe Kit — $2,000/yr →

Why now

This isn't hypothetical. Regulators, insurers, and attackers have all already moved.

70 formal NIS2/ANSSI enforcement actions since April 2026, a 540% surge in prompt-injection reports, and insurers now excluding AI-agent losses from standard policies by default.

What you're actually buying

One system that watches, deceives, proves, and keeps testing itself — deployed as one thing, on your own infrastructure.

The products in the roster below each do one real piece of this. The platform is the whole thing, running together — including two systems that never got sold on their own at all.

Leviathan Platform v0.2.0, tagged and green

Built in the open, tested against itself.

Every claim on this page is backed by a real, passing test suite — not a marketing number.

1,225

Python tests passing in Leviathan Control (20 opt-in/environment-conditional skips, by design).

151

Leviathan .NET tests passing.

Self-hosted

No telemetry leaves your network, no vendor cloud sits between your data and you, and nothing is locked behind an API you can't touch — it's your deployment, fully yours to customize.

Iron-Thread

A real Python egress firewall built on sys.addaudithook — blocking unauthorized outbound connections before they leave.

7 of 10

OWASP Agentic Top 10 risks with a real, tested module against them — checked against the code, not asserted. See the mapping →

Leviathan Platform pricing

One paid pilot month, then a flat rate. That's the whole ladder.

No per-seat fees, no per-node fees, no fake tier ladder designed to nudge you toward "Enterprise." A hands-on pilot deployed on your own infrastructure, then a flat monthly rate if you keep it.

Standard
$3,500/mo

Ongoing access after the pilot. Cancel anytime — no long-term commitment required.

Convert within 30 days of finishing the pilot and your first standard month is free.
The platform license includes every product on this page — Bait-Mask, Amber-Freeze, and All-Stop are bundled free for the first 12 months, on top of everything above. They're only priced separately if you want just one of them, without the platform.
Card checkout: built for most products, temporarily paused during payment-processor identity verification. Reach out and we'll get a license or trial issued directly in the meantime.

Can I see it working before committing to a pilot?

Yes. The interactive demo runs real detection logic in your browser — not a video, not a mockup. The free SSH key trap is a real, working honeytoken you can deploy today, no signup, no cost.

Do we need Docker or Linux experience on our team?

The deployment is a docker-compose stack, and the pilot is hands-on — deployed together with you, not a file dropped in your lap and left. Some familiarity helps, but you're not doing this alone.

What does the pilot month actually involve?

Full platform access, deployed and evaluated against your own infrastructure, for one month. There's no rigid onboarding script — the specific plan gets worked out directly with you, based on your setup and what you're most worried about.

What if it doesn't work out?

If the platform genuinely doesn't do what this page says it does, tell us and the pilot gets refunded — that's the real refund policy, not a marketing line.

Northstar is one person — isn't that a risk?

Yes, and it's stated plainly, not hidden. What it means day to day: no support queue, direct access to the person who wrote the detection logic. What it means for risk: everything ships self-hosted — your deployment keeps running on your own infrastructure regardless of what happens on ours — and every release is GPG-signed, so what you're running is verifiable independent of anything else.

Just want one piece?

Every idea above is also sold as its own product.

The platform is one deployment of all five systems together. If you only need one piece of it, each is also available on its own — its own price, its own trial.

Try the real thing, free

The SSH key trap. Free forever, no signup.

A real, valid key generated by actual ssh-keygen — its comment field carries a beacon URL instead of a name, so it passes any scanner that checks key structure. Plant it, leak it on purpose, and watch what happens the moment anyone actually tries to use it. MIT-licensed, part of Decoy Kit.

The full roster

Eight products. Buy the platform, or buy one piece.

Each product stands on its own — its own price, its own trial, its own test suite. They share the same lineage: the same self-hosted-only rule, the same honest-disclosure format, the same signing scheme.

Rune, the wizard terrier, and Kip, the scout parrot — Leviathan's guardians

Rune governs and detects. Kip is your canary — plant a hidden tripwire word in an agent's own instructions, and if it ever shows up in a response, something tried to override them. A real, built mechanism (plant_canary / check_output_for_canary), not just a mascot.

Talk to us

Whether that's a pilot of the full platform or a single product.

You'll hear back from the person who built it, not a queue.