recording · 40,000 events · chain intact
The blackbox recorder for AI agents.
When a regulator, auditor, or court asks what your agents did, log files aren't proof. Wytness records every agent action — signed with your key, PII sealed, verifiable seven years later.
record, slide 3 of 8
why logs fail
Logs say what probably happened. Evidence proves it.
Application logs can be edited, lost, or quietly rewritten — and every auditor knows it. Wytness signs each agent action at the moment of execution and chains it to the events around it. Alter one record and two independent layers break.
ed25519 · customer-held
0 forgeable
Every event is signed at execution with a key only you hold. Nobody — including us — can forge or alter one.
hmac + x25519
Sealed PII
Personal data is tokenised in your environment before anything reaches us. We store tokens we cannot decrypt — same input, same token, so sessions stay correlatable without us ever holding the real value.
append-only storage
Kept seven years
Events land in append-only storage — Wytness-hosted by default, or your own Azure Blob tenancy with your own immutability policy. Leave, and the archive leaves with you: signed Evidence Packs at handover.
verification
offline ✓
Chain hashes and signatures verify with your public key. No Wytness account needed.
flight sequence
From pip install to auditor-ready in five minutes.
T+00:00 · record
AGT records
Microsoft's open-source Agent Governance Toolkit runs inside your agent code and captures every tool call.
T+00:01 · seal
Wytness seals
The SDK tokenises PII and signs each event with your key before it leaves your environment.
audit day · prove
You prove
Events stream to your dashboard. When the auditor calls, export an Evidence Pack mapped to SOC 2, the EU AI Act, or ISO 27001.
mission overview
What your auditor sees.
The action, not the sensitive content. Chain health, anomalies, and every agent on one screen — with the sensitive fields sealed before they ever left your environment.
secrets
Anything named key, secret, token, or password becomes [REDACTED] before egress.
pii
Deterministic HMAC tokens, reversible only with your browser-held key.
integrity
AGT hash chain plus per-event signature — independently verifiable, offline.
the product
One recorder, three surfaces.
/product/ledger
Ledger
The evidence: customer-held signing, seven-year storage, Evidence Packs.
Explore →/product/registry
Registry
The inventory: every agent, tool, and session, with seven anomaly rules watching the stream.
Explore →/product/shield
Shield
The guardrails: author policies, route risky actions to a human. Preview today; enforcement Q4 2026.
Explore →why nobody else can say this
Your keys. Your storage. Anyone's cloud.
Keys are generated in your browser and never leave you — we can't read what we store. Evidence lives in our storage or your own tenancy. Built on Microsoft's MIT-licensed AGT: the primitives are open and inspectable, on Azure, AWS, GCP, or on-prem.
Your agents are already acting. Start recording.
$199/month · 14-day trial · five minutes from install to events on screen







