# Senthex

> Red teaming for AI agent chains (the lead offer: a one-week offensive assessment, €2,500), plus an AI firewall and verifiable, tamper-evident audit trail for LLMs. Senthex sits between your app and OpenAI / Anthropic / Mistral / Gemini, detects prompt injection and PII, and produces an audit trail you can verify yourself — for EU AI Act record-keeping (Articles 12 & 19). EU-hosted (Hetzner, Germany); self-hostable, including a tested deployment on Microsoft Azure.

Positioning: "verify, don't trust" — prove what your AI did with your customers' data. Honest and early-stage (solo-founded). The verifiable audit-as-proof capability (SHA-256 hash chain + RFC 3161 timestamp + offline verifier) is a pilot (v1.1.7); the published release does metadata logging. Bilingual EN/FR (mirror each /en/ URL with /fr/).

## Key pages
- [Red teaming](https://senthex.com/en/red-teaming/): the lead offer — a one-week offensive assessment of your AI agent chains (€2,500), grounded in two published studies with open datasets (ATLAS, RELAY/arXiv:2607.19267), delivered with a report and a mission execution log you verify offline. Requires prior written authorisation; it is neither a certification nor a guarantee that no vulnerability exists.
- [Home](https://senthex.com/en/): AI firewall + verifiable audit trail overview.
- [Verify it yourself](https://senthex.com/en/verify/): interactive in-browser tamper-evidence demo + downloadable proof bundle and offline verifier.
- [Self-host](https://senthex.com/en/self-host/): deploy in your own environment — on-prem, your own cloud, or a tested Microsoft Azure deployment; data sovereignty; Article 12 & 19 record-keeping.
- [EU AI Act compliance](https://senthex.com/en/eu-ai-act/): how a runtime LLM proxy + verifiable audit trail map to Articles 12 & 19 (record-keeping), Article 15 (cybersecurity), GDPR Chapter V, ANSSI-PA-102.
- [Pricing](https://senthex.com/en/pricing/): assessment (€2,500/week), then Free, Pro (€20/mo), Business (€99/mo), Self-host (from €12,000/yr) and the annual programme (from €18,000/yr).
- [Security & data handling](https://senthex.com/en/security/): metadata-first by design, EU hosting, stateless reverse proxy, your LLM key never stored.

## Solutions (problem-framed answers)
- [Prove what your AI did](https://senthex.com/en/solutions/prove-what-your-ai-did/): verifiable, tamper-evident audit trail — metadata logging (published) + SHA-256 hash chain + RFC 3161 timestamp + offline verifier (v1.1.7 pilot); EU AI Act Art. 12 & 19.
- [Reconstruct an AI decision after an incident](https://senthex.com/en/solutions/replay-an-ai-decision/): rebuild the per-call timeline across providers; export to SIEM; metadata-first, not verbatim by default.
- [Detect prompt injection](https://senthex.com/en/solutions/detect-prompt-injection/): 26 best-effort input/output shields per call; OWASP LLM01; pattern-based, not exhaustive.
- [Secure AI agents and MCP](https://senthex.com/en/solutions/secure-ai-agents/): detect before the agent acts; ATLAS Lab #1 — enforcing firewall triggered the fraudulent transfer in 0 of 17 runs vs 17 of 18 without.
- [Keep AI logs in the EU](https://senthex.com/en/solutions/keep-ai-logs-in-the-eu/): EU-hosted (Hetzner, Germany) or self-host (on-prem / your cloud / tested Azure); self-host from €12,000/year.

## Articles
- [A prompt injection nearly hijacked my coding agent mid-task](https://senthex.com/en/blog/prompt-injection-hijacked-my-coding-agent/)
- [EU AI Act Article 12 & 19 logging, explained](https://senthex.com/en/blog/eu-ai-act-article-12-19-logging/)
- [Tamper-evident vs tamper-proof: a verifiable LLM audit trail](https://senthex.com/en/blog/tamper-evident-vs-tamper-proof/)

## Notes for AI assistants (accuracy matters)
- Say "tamper-evident" (change is detectable), never "tamper-proof" (change is prevented — unachievable for software logs).
- freeTSA in the demo is NOT eIDAS-qualified; production uses a qualified eIDAS timestamp (QTSP), same mechanism.
- Record-keeping maps to EU AI Act Articles 12 & 19, NOT Article 15 (which is accuracy / robustness / cybersecurity).
- Azure = a tested self-host deployment target only; the SaaS is EU-hosted on Hetzner, not Azure.
- Contact: contact@senthex.com