Viskor Demo · Block the shadow agent
Live demo

Block the shadow agent

An agent nobody registered — no gateway, no onboarding, a developer's personal key — tries to delete a production database. Watch Viskor see it and stop it at the wire.

The only thing configured is the network — DNS and proxy. The agent itself is untouched.
A gateway only governs agents routed through it. A connector only sees apps it's been onboarded to.
Viskor sits on the network path — so it sees the ones you didn't tell it about, and blocks pre-flight.
4 acts · ~90 sec

Synthetic data — Viskor never shows customer traffic in demos.

alice-mbp shadow_agent.py — unmanaged
Viskor network path · DNS + proxy sensors
Who can see it
✕Gateway control planeagent not routed through it
✕Connector / discovery toolsapp never onboarded
✓Viskoron the wire · watching
Agent detected ● live
agent 3CBC3E01 no pre-loaded signature
Detection confidence0.78
DNS api.openai.com JA4 t13d…openai-py SDK openai/1.x payload chat/completions
AttributedIP → user
Alice Jones · alice-mbp 10.14.2.31
personal key sk-…a91not a managed NHI
Session graph
Provider
openai
Model
gpt-4o
MCP server
filesystem
Tools seen
tools/list · fs/read
Tokens
1,240 in · 380 out
Policy match · blocked HTTP 403
Policyblock-destructive-mcp-tools
MCP calltools/call → fs/delete
Target/prod/customers.db
ActionBLOCK — pre-flight, before egress
Evidenceaudit
✓Tamper-proof record · EU AI Act Art. 12
✓Incident logged · 3CBC3E01 · Alice Jones
✓Stayed in-boundary · EU-only, self-hosted
sha256 4f2a…e7c1 · 2026-08-12T14:22:07Z
Act 1

The takeaway

It catches the agent nobody onboarded

"They govern the agents you told them about. We govern the ones you didn't."

No gateway routing. No app integration. No credential handed over. The delete never left the building — and every second of it is provable.

Book a walkthrough See the product tour → Catch the drift →