[ 01 ]
Write time
Inline before save
[ developer security platform ]
Catch it at write. Block it at commit. Stop it at runtime.
ekmire scans your IDE buffer, intercepts every git commit, and inspects every production request through one proxy, one CLI, one dashboard. No SDK to integrate. No language to support.
Free tier with BYOK · No credit card · No call with sales
~/auth-service
$ pip install ekmire
Successfully installed ekmire-1.0.0
$ ekmire install-hook
✓ pre-commit hook installed
$ git commit -m "add auth handler"
[ekmire] scanning 3 files...
CRITICAL HARDCODED_AWS_KEY src/auth.py:14
Hardcoded AWS access key detected.
Fix: move to environment variable.
[ekmire] commit blocked. 1 critical finding.New to ekmire?
Not sure where to start? Our docs walk you through every layer of the toolkit — from your first
pip install ekmire
to a self-hosted proxy in production.
[ architecture ]
Three surfaces. One signal.
Most tools cover one layer. ekmire covers the moment you type, the moment you commit, and every request your application handles.
[ 02 ]
Commit time
Blocked at the hook
[ 03 ]
Runtime
Inspected at the edge
[ runtime ]
What a blocked attack looks like.
Live output from a proxy in front of a customer chat endpoint. Three events, three different mechanisms.
proxy.log — tail -f live
$ ekmire proxy --upstream http://app:3000
[ekmire-proxy] authenticated. rules bundle v1.4.2 loaded. 312 rules active.
[ekmire-proxy] listening on :8080
14:22:01 BLOCK semantic score=0.94 src=proxy
Prompt injection detected in POST /api/chat
payload_hash=a3f9b2... attacker_cost=$0.0003
14:22:04 BLOCK PROMPT_INJECTION_STATIC src=proxy
Known jailbreak pattern in request body.
14:22:09 INFO tarpit ip=203.0.113.42 consecutive=4
Behavioural pattern. Tarpitting at 1 byte/s.[ modules ]
Everything in one place.
Six modules. One unified timeline. No vendor stitching required.
BUILD GUARD
Commit-time scanning
Runs offline on every git commit. Blocks secrets, injections, and unsafe deserialization before they enter your repo.
NETWORK SHIELD
Request interception
Header deception, IP reputation, and deterministic rule matching on every inbound request. Less than 2ms overhead.
SEMANTIC ANALYZER
AI-layer defence
Scores suspicious payloads against prompt injection, jailbreak, and indirect-injection patterns.
THREAT FEED
Rules that update nightly
CVE and NVD pipeline runs every night. Approved rules hot-reload to every proxy within 60 seconds.
ACTIVE DECEPTION
Tarpit and poison
Automated scrapers get HTTP 200 at 1 byte per second. HTML responses carry zero-width markers.
MCP PROTECTION
The only write-time guard
Detects MCP tool-poisoning attacks at write time. Runs locally in your IDE via stdio. Sub-50ms. Offline.
[ privacy ]
Your key. Your inference. Your prompts.
Two paths on the free tier. Use ekmire's inference pool with usage limits, or bring your own OpenAI, Anthropic, or Ollama key. With BYOK, ekmire routes the call and forgets it — we never log prompts or responses. Your key is AES-256-GCM encrypted at rest, decrypted only in memory.
See pricing →| ekmire Inference | BYOK (your key) | |
|---|---|---|
| Events / month | 2,000 | 10,000 |
| Dev-audit calls | 50 / month | Unlimited |
| LLM cost | ekmire absorbs | your account |
| Code sent | hashed only | your provider |
| Setup | none | paste your key |
[ pricing ]
Start free. Scale when you need to.
Every plan ships every module. Volume and seats are the only difference.
Annual plans save 20%. Prices in INR. USD shown for reference only.See full comparison →
< 5ms
p99 proxy overhead
312
rules in active bundle
Ed25519
signed rule bundles
BYOK
no prompts stored
[ get started ]
Protect your stack in five minutes.
Install the CLI. Add two lines to Docker Compose. Every layer goes live.
install
$ pip install ekmire && ekmire install-hook
$ docker compose up # two lines added to your existing compose file