TrustRadius: an HG Insights company

EVE CoreGuard

What is EVE CoreGuard?

EVE CoreGuard governs what an AI system is allowed to do, and proves what it did.

An agent proposes an action. CoreGuard evaluates it against deterministic policy packs and returns ALLOWED, BLOCKED, or MODIFIED before the protected executor is entered. The boundary is fail-closed: without an ALLOW bound by digest to that exact operation, the executor refuses to run.

No language model participates in the verdict. Policy packs are deterministic predicates over a request context, so identical input yields identical output and identical rule identifiers — the same decision, reproducible on demand for an examiner months later.

Every decision emits an evidence record: a content hash over the decision payload, a signature over that hash, the signing key id, and a position in a hash chain. Production signing is ECDSA P-384 with the private key resident in AWS KMS. A third party verifies a certificate offline using the published public key alone — no access to EVE, and no vendor attestation required.

CoreGuard governs what is declared by the user. CoreGuard enforces against an operator-declared registry of agents, tools, and systems; it does not scan or enumerate the user's estate.

Built for teams that have to answer for an AI decision after the fact: lending, insurance, healthcare, and government.

Categories & Use Cases

Screenshots

Screenshot of Pre-execution enforcement: a blocked AI action. CoreGuard intercepts a proposed AI action, evaluates it against deterministic policy, and terminates execution before it runs. Shows the live gate round-trip, the CRD score, and the policy class that fired. No LLM anywhere in the decision path.
Screenshot of Independently verifiable decision evidence. Every decision is sealed into a signed record that any auditor can verify offline against EVE's published key, with no EVE account and no live connection required. Shows the full seal pipeline: Request, Policy Gate, Decision, Signed Certificate, Audit Ledger.
Screenshot of Scan an AI agent before you let it act. Authority Lab parses an agent's declared surface, whether an OpenAPI spec, MCP server manifest, AWS IAM policy or tool definitions, for excessive authority, standing credentials and bypass paths, then returns a signed, independently verifiable Agent Authority Report.
Screenshot of Author and compile deterministic policy. Write a policy in EVE's YAML policy DSL and compile it to a reviewable, versioned, deterministic pack, the same shape CoreGuard enforces at runtime. Templates ship for agentic safety, financial, healthcare and PII baselines. The public compiler produces a draft only; activation is a separate governed step.

1 / 4

Screenshot of Pre-execution enforcement: a blocked AI action. CoreGuard intercepts a proposed AI action, evaluates it against deterministic policy, and terminates execution before it runs. Shows the live gate round-trip, the CRD score, and the policy class that fired. No LLM anywhere in the decision path.

Technical Details

Technical Details
Deployment TypesSaaS
Mobile ApplicationNo

FAQs

How much does EVE CoreGuard cost?
EVE CoreGuard starts at $150000.
What are EVE CoreGuard's top competitors?
Credo AI are common alternatives for EVE CoreGuard.