Know what your AI agents are doing
For the security, risk and platform leads who get asked “who authorized this agent?” Every action streamed, attributed to a real identity, and packaged into evidence an auditor can re-verify offline.
Built for whoever gets asked the question
Three people, three questions. Each one is answered from signed records, not from memory.
Security and risk leads
“Which agent did this, and who approved it?”
Each action Provantix records is attributed to a workload identity and its owner, with the approval attached when your application records one.
Platform and engineering leads
“Is the workflow healthy before a customer notices?”
See what stopped running, started failing or slowed down, measured against each agent's own history.
Auditors and customer reviewers
“Can I verify this without trusting you?”
Re-check the evidence on your own machine, against a signature and public keys we publish.
Logs tell you something happened.
Provantix tells you who made it happen.
- · an API call happened at 09:41:04
- · a token was presented, maybe valid
- · a pod scaled from 2 to 4 replicas
- · …who authorized it? Ask the team. Hope they remember.
- ✓ svc-sre-bot acted, bound to owner platform-team
- ✓ credential recorded from the identity provider sign-in at 09:41:02
- ✓ chain-of-custody hash links the action to its authorization
- ✓ exportable evidence, custody hashes re-compute on the auditor's side
Also: change against each agent's own history. Provantix flags an agent that goes quiet, fails more or runs slower than its own past, and tells its owner. It compares against history, not a forecast, and needs your emitter to report outcomes and timings. How it decides.
Start from the question you have
Each page answers one question, says what the evidence proves and what it does not, and ends with a way to get an invite.
Questions about trust? Keys and custody, the transparency log and the auditor verification kit.
What the evidence proves — and what it doesn't
Auditors trust a product more for the limits it states than the claims it makes. Here are ours.
- ✓ Attribution — which workload identity acted, who owns it, and the credential that authorized it
- ✓ Sequence and custody — a hash chain from capture to export; an auditor re-verifies it on their own machine, and checks our signature on the export against a published key
- ✓ Declared reach vs observed activity — what the agent was allowed to touch, against what it actually touched
- ✓ Completeness, honestly — missing evidence is reported as missing, never smoothed over
- · Whether the agent's answer was right — outcomes are technical (did the call error), not verdicts on the task
- · The content of what was said — prompts and completions are kept as hashes only
- · What your telemetry never emitted — coverage is stated per metric, so a gap reads as a gap
Don't take our word for it
Evidence is only evidence if someone else can check it. Here is how, with nothing from us but a file.
From raw telemetry to defensible evidence in four steps
One pipeline, a drop-in SDK for your agents, no schema to design. Every stage writes to a chain an auditor can recompute on their own machine.
Direct HTTP, the Node SDK, or bulk import from Langfuse (LangSmith rolling out). Events are signed at capture and validated on arrival.
Entra ID (beta) and Microsoft 365 (in validation) audit data bind every action to a workload identity and the human or team that owns it.
Identity anomalies, shared credentials and reach beyond granted authority surface as findings, each one traceable to its full event chain.
Export evidence bundles your auditors can verify independently. Exports are signed and our public keys are published, so a bundle can be checked for where it came from as well as for tampering.
Discover. Attest. Prove.
Three capabilities, one evidence model, built for the moment an auditor, regulator or customer asks who authorized an agent's actions.
Discover
A living inventory of every agent in the estate, registered or not, with owners, credentials, and activity history.
Attest
Chain-of-custody on every event. Who acted, who authorized, and what happened before and after. Gaps are flagged, never hidden.
Prove
Attested evidence packaged for auditors, regulators and customers. SOC 2 evidence, change control, incident forensics, one export.
Meets your agents where they already live
Asked by every security team we meet
Your agents are already acting.
Start proving who authorized them.
Early-access organizations get a dedicated database, identity connectors, and a guided import of their existing traces.
Invite-only during early access. Google Workspace SSO supported from day one.