Northstar Talk to us

Trondheim, Norway · 63.43°N 10.40°E

Autonomyyou can prove.

Northstar is one self-hosted platform that gates what your AI agents do, contains them the moment they go wrong, and keeps a signed record anyone can verify offline. In a data centre, on a ship, or on a box under a desk.

Request a pilot Try to break the record ↓
8,324tests passing, re-run 2026-10-06 0bytes of telemetry, ever 1file to verify the evidence offline
Evidence ledger · live simulationblock 0
sha-256 chained · computed in your browserhead —

The problem

Firewalls watch the door. Agents are already inside.

AI agents hold real credentials and call real tools. When one is tricked, hijacked or simply wrong, the tools that guard the perimeter have nothing to say. Northstar works on the inside, on every action, and leaves proof behind.

0

bytes leave your network. Self-hosted end to end, no cloud dependency, nothing phones home.

by design · verifiable on the wire
Every

tool call that passes through the gateway is checked against policy before it runs, with its arguments and its result.

gate · contain · prove
1 file

is all an auditor, insurer or regulator needs to verify the record offline, without trusting us or our dashboard.

stdlib python · ed25519 + merkle

One platform

Three jobs. One control plane. Every environment.

Start with one module or run the whole thing. Every module writes into the same evidence fabric, so what one part decides, every other part can prove.

Evidence fabric

Hash-chained events, Ed25519-signed exports, Merkle proofs and a witness-cosigned transparency log. Attachment points for qualified eIDAS timestamps are built in: self-signed today, ready for a qualified authority.

Gate: admission, argument and result scanning on every tool call. Contain: org-wide kill switch and deception traps. Prove: signed, hash-chained evidence.

Proof, not promises

Go on. Try to rewrite history.

This is a real SHA-256 hash chain, computed live in your browser. Each event's seal depends on every event before it. Nothing here talks to a server.

  1. Click any event and change a word. Say, turn DENY into ALLOW.
  2. Press Verify. The edited event and every one after it break.
  3. That's the property auditors need: you can't quietly fix the past.
● chain intact · 6/6 verified
sha256(prev_hash ‖ event)root —

Where it runs

Wherever the cloud can't, or isn't allowed to.

The same platform, packaged three ways. All of it works with the network cable pulled.

Your cluster

Containers on the infrastructure you already run: Linux, Docker, Kubernetes. No per-seat or per-node fees.

docker compose · k8s

Northstar Node

One box, everything on it: gateway, traps, ledger, nightly off-site backups, private-network access only. Our reference node is a 2012 quad-core desktop.

appliance · tailnet-only · runs 24/7

At sea, air-gapped

Evidence gathered offline, signed on board, and co-signed by a witness when the link comes back. History can't be rewritten in between.

store-and-forward · 0 egress
Simulation

One ordinary day

Eight kinds of organisation. One real stack.

A compressed-time day on fictional organisations running the real platform. Traps fire, the kill switch holds, the record fills.

  • Maritimeoffline evidence, witness logs
  • Energy & OToperational boundary held
  • Bankingsupplier-redirect fraud blocked
  • Healthcarepatient-data access gated
  • Logistics · Retail · Public sectoragents kept in their lanes

Spotlight · maritime

Proof that survives a week without signal.

A ship is the hardest place to keep honest records: no reliable link, a strict IT/OT split, and many parties who don't trust each other. That is exactly what Northstar was built for.

  • Decisions and evidence recorded on board, with zero egress
  • Signed bundles a class society, insurer or port can verify offline
  • An append-only log a witness co-signs, which refuses a rewritten history
  • Packaging ready for eIDAS qualified timestamps when ashore
Voyage evidence · illustrative, fictional vessel
connectivityoffline 6d 14h
events recorded12,408
policy decisionsallow 11,962 · deny 431 · hold 15
chainVALID · merkle root a3f9…c41e
exported25519 signed · 1-file verifier
witnessco-signed on reconnect
rewrite attemptREFUSED · consistency proof failed

Real, and pre-release

Both true at once. We won't blur it.

Every figure re-run on 2026-10-06. The full probe-by-probe record, failures included, is public.

2,849Leviathan control-plane tests
1,575Harpoon offline tests
1,399MCP Gateway tests
1,270Agent Guardrails tests
16/16adversarial scenario proofs

Built and maintained by one person in Trondheim. Not yet done: an independent third-party penetration test. It's planned, and stated before you ask. Never happening: your data leaving your infrastructure, or telemetry phoning home. See the evidence →

Where this is going

From products to a proof platform.

Now

Platform

Gate, Contain and Prove on one control plane, self-hosted, with an evidence fabric under all of it.

Now

Northstar Node

The whole platform on one box you own, reachable only over your private network.

Next

Witness network

Class societies, insurers and auditors co-sign your log. Trust that doesn't depend on any one party, including us.

Next

Evidence API

Any system can drop events in and get back a signed, offline-verifiable receipt.

Start with a pilot

A low-cost way in, with skin in the game on both sides.

Agent security check
$199 founding price

A one-week hands-on review of one AI agent: injection testing, tool-call review, decoy traps, and a signed report you can hand an auditor.

Details →
Team pilot · start here
$500 30 days

The full platform on your own infrastructure, with hands-on help standing it up. Credited in full toward your subscription if you continue.

Request a pilot
Platform subscription
$3,500 / month

Every module, unlimited environments and seats in your org, updates, next-business-day support and a quarterly red-team refresh.

See pricing →

Get in touch

Tell us what you need to prove.

A pilot of the whole platform, a single module, or a conversation about your fleet. You'll hear back from the person who built it.

Request a pilot [email protected]