LOW COST · RELEVANT · SAFE

Enhance your productivity without giving away your data

Build your custom assistant that helps with your personal affairs, your professional needs or your business tools, without compromising safety.

You don't need to spend a genie's wish on a ham sandwich.

An AI model is like a genie: powerful, but uncontrollable and costly. Your agents should call the genie only when it's needed.

Choosing the right tool

No model call

Acting in your systems

Only when your rules allow

The AI model

Called only when needed

Conversations

Stay on your own machine

HOW IT WORKS

Smart where it matters, predictable everywhere else

Three things keep your agent useful, affordable and safe, and none of them asks you to understand how AI works.

01

It understands what people ask

Your agent reads each request against what each of your tools says it does, and picks the right one itself, without asking the AI model. The same request always gets the same tool, and you can see why. It learns your customers' own words from their thumbs up and down, and keeps a new word only when it makes nothing worse.

02

It works with the tools you already have

Connect the systems your business already runs. Each tool is checked before your agent may use it: for secrets it could leak, data it could send where it shouldn't, and changes it could make with no way back. Then, every time, your rules decide: go ahead, ask a person first, or refuse.

03

The whole flow is checked before it runs

Before your agent, or a team of agents working together, goes live, every route through it is checked for a way to reach a risky action without its safeguard, such as a payment with no confirmation from the customer. If there is one, you see the exact route, before a customer finds it.

A REAL EXAMPLE

We checked the public safety rules that a whole industry copies

We pointed the Guardrail Bug Hunter at the public safety-rule files of a leading open-source AI safety toolkit: its own library of ready-made rules, the sample assistants its maker publishes, and projects from partners and the community. 185 files from 12 public collections, checked offline, with no AI model involved.

Two files held real weaknesses, and each one was reproduced in the toolkit itself. The Bug Hunter can fix both: it writes a corrective rule for each, and checks that the rule closes the gap without blocking anything else.

These are professional examples that many teams copy, so every weakness travels with every copy. Testing by hand would have had to guess the right conversation. The Bug Hunter found each one, with the conversation that triggers it.

185

safety-rule files from 12 public collections

2

files with real weaknesses, each reproduced in the toolkit itself

32

actions anyone could trigger just by steering the conversation

8.5 s

to scan all 115 of the toolkit's files

Finding 1 · Ready-made rule

Made-up answers reported as attacks

A rule that spots the AI making things up reports it as an attempt to trick the AI. A team that blocks those attempts blocks every made-up answer too, and a team that handles made-up answers never sees this rule's.

Fix written and checked
Finding 2 · Sample assistant

Three defects in a food-ordering assistant

Clearing the cart never runs, swapping an item checks the wrong value, and replies about the customer's order are left to AI-written text that nobody checks.

Reproduced, fixable by the Bug Hunter
Finding 3 · Across the files

Actions anyone can trigger

32 actions in 28 files run on the user's apparent wish alone, so anyone who can steer the conversation can trigger them. Two of them place food orders with no check of who asked or whether they confirmed.

Reported with the route

Figures from our research paper, for a scan run on 3 October 2026.

WHY STALWART

Low cost, relevant and safe by design, not by luck

An AI model left to run an agent on its own costs money on every decision, guesses at your business and acts on whatever it decides. Stalwart Agents puts your rules and your customers' words in charge, and calls the model only when it's needed.

WHAT MATTERSAN AI MODEL ON ITS OWNSTALWART AGENTS
Choosing what to doAsks the AI model every time, and the answer can changeNo model call: your agent picks the tool itself, and the same request gets the same tool
Acting in your systemsWhatever the model decidesOnly when your rules allow; otherwise it asks a person or refuses
Your business's wordsRewrite the instructions, againLearned from your customers' thumbs up and down, and reversible
Hidden routes to a risky actionFound when someone stumbles on oneSearched for before it runs, each shown with its exact route
Paying for the AI modelOn every decisionOnly when it's needed, or never if you turn it off
GET STARTED

Put your own agent to work, safely

Create a free account and build your first agent, or read the API reference and try a call.