Attack your own models before someone else does.
Two halves that face each other: a harness for attacking the models you own, and a guard layer for the models you have already deployed.
A deployed model is an unsupervised decision-maker with a public input surface.
Every organisation putting a language model into production has created an actor that takes instructions from whoever can reach its inputs. Prompt injection, retrieval poisoning, and synthetic media are not future risks for those systems; they are the current attack surface.
Sentry addresses both directions. The offensive half is a harness for red-teaming models you own, so you find the failure before an adversary does. The defensive half sits in front of models already in production and covers the paths attackers actually use against them. Everything it decides lands in a tamper-evident audit trail.
Attack your own models
A structured harness for testing models you own and control, so the failure is one you found. Scoped to your systems, never someone else's.
Guard what is already running
Sits in front of models in production and covers the paths an attacker actually reaches for.
Decisions get written down
Every call it makes lands in a tamper-evident audit trail rather than a console nobody reads.
Human review where it matters
Consequential actions route to a person instead of resolving quietly.
TRL 6, and running in deployed services today.
The defence core is demonstrated in a relevant environment and in production use. The offensive harness is scoped to models you own and control.
It runs hosted, on your own infrastructure, or fully disconnected. Anything more specific than that — how it works, what it integrates with, what it has been measured at — comes with an agreement rather than a web page.
Released on request, not published.
There is a measured record behind every claim on this page — what was tested, in what environment, what it caught and what it missed. We hand it over once there is an agreement in place rather than posting it here, so it travels with its caveats attached and we know who holds which revision.
Ask and we will tell you what exists for Sentry and how quickly we can get it to you.
Tell us what you are trying to protect.
We will tell you whether Sentry is ready for it. If it is not, we will say so and point you at the part of the platform that is.