| What it does | Fraud detection and prevention for web apps that detects account abuse and bots under any masking
| Deception-based AI security platform protecting AI systems with canary tokens, trap facts, prompt firewall, honeypots, and tamper-evident audit trails
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2025
| Not given
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free tier with 5,000 identifications. Paid plans: Starter $99/month for 25,000 identifications (monthly billing) or $79/month billed yearly; Growth $399/month for 150,000 identifications (monthly) or $319/month billed yearly; Scale $999/month for 500,000 identifications (monthly) or $799/month bille
| Free plan with 3 decoy identities, 2 CanaryRAG documents, 10 Shield inspections per month, no credit card required. Shield at $12/mo includes 9 decoy identities, 3 protected emails, 500 Shield inspections per month. Pro at $24/mo includes everything in Shield plus tamper-evident logging at scale and
|
|---|
| Key features | - Device fingerprinting to recognize devices and detect headless browsers and tampering
- Multi-accounting detection starting at three accounts per visitor
- Risk scoring from 0 to 100 with signal breakdown
- Bot and AI traffic detection with browser automation signals
- IP geolocation and real IP address revelation behind masking
- Traffic quality scoring by source, channel, referrer, and UTM campaign
- Dashboard, API, and webhooks for results delivery
- Five-minute integration with JavaScript snippet or supported SDKs
| - Decoy email identities seeded into fake credential dumps on paste sites that alert when used
- Trap facts woven into documents to catch AI knowledge base leakage
- Three-layer prompt-injection firewall between users and models
- Fake AI endpoints that fingerprint attackers and classify their intent
- SHA-256 sealed, tamper-evident action logs for all agent actions
- OpenClaw agent heartbeat monitoring, skill scanning, and live action timeline
- Legal PDF export of tamper-evident records (Pro and above)
- API access on all plans including Free
- Email and Telegram alerts for all triggered canaries
- Threat-intel enrichment checking hits against IP reputation and exposure data
|
|---|
| What makes it different | - 99.9% identification accuracy and 99.9% risk signal detection accuracy across 300+ signals
- Ready-made High-Risk Event detection requires no custom fraud model training
- Explainable risk scores showing which signals fired and their weights
- Self-serve five-minute onboarding with no procurement or sales cycle required
| - Managed SaaS deployment with no hosting or maintenance required, unlike traditional honeypots
- Automated seeding of decoy credentials to paste platforms with staggered timing
- Purpose-built AI leak detection via trap facts in RAG systems
- Evidence-focused design with tamper-evident, verifiable logs
- Free plan with full access to all product surfaces for testing
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 39 ▼ −1 (down) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 15 | 0 |
|---|
| Citation Flow (Majestic) | 37 | 0 |
|---|
| Referring domains (Majestic) | 240 | 0 |
|---|
ShieldLabs
CanaryVaults