Vindicara Launches the First Open-Source Runtime Security Platform for AI Agents

LOS ANGELES - EntSun -- LOS ANGELES,  Vindicara, Inc. today announced the general availability of Project AIR, an open-source runtime security platform purpose-built for AI agents. The MIT-licensed SDK and CLI are live on PyPI and installable with a single command: pip install projectair.

AI agents are being deployed across enterprises at scale, yet runtime security remains an afterthought. Existing tools monitor model inputs and outputs but ignore the agent itself: the tools it calls, the decisions it makes, the data it exfiltrates. Project AIR closes that gap by recording every agent action as a cryptographically signed forensic record, called a Signed Intent Capsule, then running real-time detection and producing audit-ready evidence.

Project AIR ships with 14 security detectors covering all 10 categories of the OWASP Top 10 for Agentic Applications (ASI01 through ASI10), three categories from the OWASP Top 10 for LLM Applications (prompt injection, sensitive information disclosure, model denial of service), and one chain-integrity check native to the platform.

More on EntSun News

• How Sacramento Families Are Using Private Autopsies to Protect Inheritances, Resolve Insurance Claims, and Find Closure
• Los Angeles' Best Food: Food Journal Magazine Examines the Trends Shaping the City's Dining Scene
• Last Thursday Writers' Collective Celebrates Fresh Voices in Prince George's County
• Landmark Construction Expands Glass, Glazing, and Commercial Remodeling Services Across Los Angeles County and Surrounding Areas
• Jazzin' On Ridge Returns for Its 6th Annual Celebration of Music, Culture, and Community

The platform is built on a four-layer trust architecture. Layer 1 anchors forensic chains to public transparency logs (Sigstore Rekor and RFC 3161 timestamp authorities) so evidence is independently verifiable with zero Vindicara API calls. Layer 2 provides automated causal reasoning across agent actions. Layer 3 integrates with Auth0 for human-in-the-loop containment when an agent attempts a high-risk action. Layer 4 extends the signed chain of custody across agent-to-agent handoffs.

"Security teams have flight recorders for servers, networks, and endpoints, but nothing for the AI agents making autonomous decisions on their behalf," said Kevin Minn, founder of Vindicara. "Project AIR gives every agent deployment a tamper-evident, cryptographically verifiable chain of custody from the first LLM call to the last tool invocation." Project AIR supports LangChain, OpenAI, Anthropic, Google Gemini, Google ADK, LlamaIndex, and any OpenAI-compatible endpoint including NVIDIA NIM. It is available now at https://pypi.org/project/projectair/ and documented at https://vindicara.io.