Barrikade
Barrikade provides security operations for companies deploying AI agents, offering an open-source inventory tool (Lens) that discovers agents across endpoints, repositories, CI, and Kubernetes, plus a runtime security engine (Core) that detects unsafe behavior during live agent sessions. The platform emphasizes evidence-based confidence scoring and privacy-enforced data collection, with early-bird beta access at €40 per month.
- Cybersecurity
- Artificial Intelligence
- Software Only
- AI Agents
- Developer Tools
Funding
Founders
Founder details are not available yet.
Product
Problem
AI agents are proliferating across enterprise environments—on laptops, in code, in CI pipelines, and on Kubernetes—often before security teams know they exist. These agents frequently borrow developers' credentials, leaving no clear owner behind their actions, and unlike ordinary software, they do not just hold data; they act, creating blind spots for security teams that cannot secure agents they do not know about.
Solution
Barrikade provides a single security layer that discovers AI agents, connects them to an identified owner, catches unsafe behavior, and explains exactly what happened. The platform consists of Lens, an open-source inventory tool that finds agents across endpoints, repositories, CI, and Kubernetes, and Core, a runtime security engine that watches agent sessions holistically. Lens normalizes findings into an evidence graph that separates autonomous agents, agent-capable tools, model runtimes, and supporting systems. Core monitors full agent sessions, spots when an agent moves off task, and records the response RNA. Together with an identity layer still under development, Barrikade aims to answer four key questions: what is running, who owns it, what may it do, and what did it do.
Target Audience
Barrikade targets enterprise security teams, including CISOs, security engineers, and DevOps professionals who need visibility into AI agents running across their infrastructure and must enforce accountability for agent actions.
Features
- Open-source Lens tool that scans endpoints, source repositories, CI pipelines, and Kubernetes using read-only permissions with no Secret or pod-exec access
- Endpoint collectors that inspect known configuration roots, processes, and listeners to detect agents on individual machines
- Repository and CI scans that analyze manifests, imports, and validated agent, MCP, A2A, OpenAPI, and workflow descriptors
- Kubernetes controller that observes workload metadata with evidence-based confidence scoring and explicit coverage reporting
- Privacy-enforced data contract that rejects prompt bodies, source bodies, credentials, environment values, and full command arguments while accepting only sanitized identifiers
- Agent runtime security capability that detects prompt-injection and off-task behavior during live agent sessions, recording responses for audit
- Evidence-before-conclusions approach requiring independent evidence families before raising confidence, distinguishing confirmed, likely, and possible findings without artificial risk scores
- Export capabilities in Lens JSON, JSONL, and CycloneDX 1.7 for integration into broader security workflows