SecKav // application · api · agent · access
Read every request.
Score every actor.
Decide in real time.
One security layer across your applications, APIs, AI agents, and private access — inspected at the edge in under two milliseconds, governed by intent, never trusted by default.
- < 2 ms
- edge decision
- 43
- inspection modules
- 0–100
- trust, per request
- 1
- DNS change to deploy
Three systems. One fabric. Every request judged the same way.
// the life of a request
Every request runs a gauntlet — and carries a verdict out the other side.
The first request costs about 2 ms while the tenant’s policy is cached at the edge. The next ten thousand are decided in under a tenth of a millisecond, without touching a database.
Trace the full pipeline// the surface, in full
Roughly a hundred and thirty controls, grouped by what they defend.
Applications & APIs
- WAF — SQLi · XSS · LFI · RCE · zero-day
- Bot & AI-crawler management
- L7 DDoS penalty box · 0 ms drop
- API shield — SSRF · BOLA · GraphQL · JWT
- India DLP — Aadhaar · PAN in memory
- Supply-chain & script firewall
AI agents
- Agent identity registry & rotation
- Living trust score, every request
- Intent-based access control
- MCP shield & tool-call inspection
- Shadow-agent discovery
- AI-generated least-privilege policy
Access & governance
- Device posture — pass · restricted · fail
- Hybrid post-quantum handshake
- Guest & contractor time-boxed links
- Magic DNS — private addressing
- Compliance across 8 frameworks
- Signed audit & attestation exports
// governance
Evidence, not adjectives.
Coverage across eight frameworks, with signed exports, breach register, RoPA, config versioning, and content-hash-verified attestations.
Browser SDK
The bridge from the browser to the platform.
A single publishable key wires consent, data-rights, and passive bot telemetry into any page — feeding the edge without ever exposing a secret in the browser.
- Consent banner — DPDP §6, 22 Indian languages
- Age gate — children’s-data rule
- Data-rights widget — access · correct · erase
- Bot telemetry — mouse · canvas · WebDriver
- Script-blocking interceptor — hold 3rd-party until consent
- Consent sync + server-side verify helper
<script src="https://cdn.seckav.tech/sdk.js"></script>
<script>
SecKav.init({ apiKey: 'pk_live_…' }) // publishable, write-only
// consent, age-gate & rights portal render automatically
</script>Point your nameservers. Watch it decide.
No agent to install, no code to change. Every request starts running the gauntlet the moment your DNS resolves.