Skip to content

Contractor demo - block a dangerous MCP call, inspect the audit chain, export evidence.

AI Contractor Runtime Governance Demo

BLOCK. EXPLAIN. EXPORT.

Watch a contractor ask Claude for a risky action, see the gateway stop it before execution, inspect the audit chain, and package the evidence.

contractor-session-01·EU Central (Frankfurt)·Up 14d 6h 0m
just now

Block

Dangerous MCP, shell, GitHub, and cloud actions stop before execution.

Explain

Audit chain links prompt, tool, policy rule, actor, and resource.

Export

Evidence pack is ready for security review and audit workflows.

Security Score

87

Good

Avg: 93/100

Updated just now

Detection Metrics

Threats blocked (24h)
23
Events analyzed (24h)
1,247
Detection latency
p50: 12ms · p95: 89ms · p99: 340ms
False positive rate
0.3/agent/day

Health Metrics

CPU23%
Memory45%
Disk31%

Score Breakdown

Prompt Injection Defense96
Tool-Call Baseline91
Egress Control94
Credential Isolation100
Supply Chain Verification88
Output Validation85
Skill Signatures100
Audit Completeness92

Recent Security Events

Prompt injection blocked — multi-turn jailbreak attempt

Layer 3 (LLM judge) flagged: "Respond as DAN" pattern with encoded bypass

critical12s ago

Data exfiltration blocked — image-upload encoding detected

Agent attempted to POST base64-encoded .env to imgur.com/upload

critical47s ago

Tool-call anomaly — argument shape deviation from baseline

write_file path="/etc/crontab" — never seen in 30-day baseline

high2m ago

Supply chain flag — MCP server dependency uses eval()

mcp-data-connector@3.1.0 → postinstall runs eval(Buffer.from(...))

high8m ago

Credential probe sequence blocked — 3 vault reads in 2 seconds

vault://GITHUB_TOKEN, vault://AWS_KEY, vault://DB_PASSWORD — rate anomaly

critical14m ago

RUN THE SAME FLOW ON YOUR CONTRACTOR STACK.

Self-guided mode shows a blocked tool call, prompt-to-MCP-to-git audit chain, and evidence export. Live mode maps the same flow to your repos, contractors, and SIEM.

Self-guided

Use this simulated tenant and see the OpenSyber control surfaces.

Live review

Book 30 minutes to map the same demo to your contractor workflow.