PrismaTech Shield
Menu

PRISMATECH SHIELD · SECURITY DECISIONS

Security for digital businesses.

Centralized security decisions, intelligent risk analysis, and verifiable protection for websites, APIs, and applications.

Explore Shield ↗Free Security Check →

Integrate with control. Understand decisions. Respect release boundaries.

01Project-scoped authorization

02Integrate fail-closed

03Evidence over promises

Products / Solutions

Security across your application.

From API credentials to agents: technical controls with clear boundaries.

01Locally implemented · release reviewed separately

Shield API Security

Project-scoped access and controlled decisions for your API.

View details ↗02Locally implemented · release reviewed separately

Shield Application Security

Control sensitive operations through context and policies.

View details ↗03Locally implemented · release reviewed separately

Shield Agent Security

Apply traceable permission boundaries to agents and tools.

View details ↗04Research · not released for production

Shield AI Defense Research

Local security research, explicitly separated from production protection.

View details ↗
SECURITY ANALYZER

A first look at publicly visible security.

Choose a website or API. Once approved, Shield passively checks a public target with one bounded HEAD request.

Free Security Check →
01HTTPS / TLS
02Security Headers
03Security Score
04API / Website

Public execution has not been approved. This interface does not send requests to your target.

SHIELD FREE

Start small. Integrate safely.

Shield Free is intended as a permanently free entry point. Registration and increased quotas await separate release approval.

Free and integration →
SHIELD ENTERPRISE

Control for complex platforms.

More applications, granular policies, and verifiable evidence. Enterprise is a planned contract, not a blanket security guarantee.

Explore Enterprise →
Developers

Integrate, verify, understand.

The existing TypeScript SDK and API contracts support controlled server-side integration. SDK distribution and production approvals are separate steps.

Developers →
Synthetic server-side example · no production credentials
import { ShieldClient } from "@prismatech/shield-sdk";

const shield = new ShieldClient({
  baseUrl: process.env.SHIELD_API_URL!,
  apiKey: process.env.SHIELD_API_KEY!,
  failureMode: "fail-closed"
});
const result = await shield.evaluateLogin({
  subject: { id: "synthetic-user" },
  idempotencyKey: "synthetic-login-0001"
});
if (result.degraded || result.decision !== "ALLOW") {
  throw new Error("ACCESS_REQUIRES_REVIEW");
}
Trust Center →

Frequently asked questions

Is Shield Free a trial?

No. Free is intended to remain free. Public registration and higher quotas still require approval.

Is the Security Check a penetration test?

No. The passive check examines publicly visible properties of one endpoint. Public execution remains closed.

Is AI Defense released for production?

Deterministic controls and synthetic research are separate. Research rules are not automatically activated in production.

How strong is the evidence?

The Trust Center separates local tests, integration evidence, and production data. Missing evidence is not replaced.

NEXT STEP

The right starting point begins with your requirements.

Explore the technical foundation, compare planned packages, and review integration and release boundaries.

Contact ↗Pricing →