The JANUS platform

Recover. Attack. Enforce.

JANUS recovers the SPEC your agent should follow, tests it, and enforces it at runtime. One engine, three products, one source of truth.

01 Recover

JANUS Audit

Recovers the business rules your agent should follow, from its code and prompts, and tests every one.

SPEC RecoveryAI-BOM
JANUS Audit Spec view: the rule “remaining travel-certificate value is not refunded” from policy.md line 79, marked contradicts, with the code lines that refund itFull size ↗
SPEC Recovery · a rule from policy.md, the code that breaks it, and why. Agent: the public τ-bench airline agent.
Reads
Code · prompts · tools · models · MCP
Produces
Business rules (the SPEC) · AI-BOM
Covers
Business-rule risk · supply-chain risk
Stage
Before go-live
JANUS Audit architecture map: user, orchestrator, 16 tools grouped by data object, and the data each tool reads or writesFull size ↗
Architecture · every tool the agent can call, and the data it reads or writes.
JANUS Audit AI-BOM: component counts and dependency table with known-vulnerability flagsFull size ↗
AI-BOM · models, packages, tools and known vulnerabilities in one inventory.

02 Attack

JANUS Pentest

Simulated attacks on agents and their AI components. Evidence, not a score.

Prompt injectionTool hijackingMCP / A2A abuse
JANUS Pentest finding: playground-exposure on /chat/playground/, CWE-749, OWASP A05:2021, with the judge’s impact, justification and remediationFull size ↗
Finding detail · endpoint, CWE / OWASP mapping, and a judge’s justification and fix. Target: a deliberately vulnerable LangServe lab app.
Targets
Agents and their AI components
Produces
Reproducible evidence · guard rules
Covers
Traditional security risk
Stage
Before go-live
JANUS Pentest findings grouped by threat: two high, two medium; 56 unconfirmed findings kept out of the reportFull size ↗
Findings · grouped by threat. Unconfirmed or judge-rejected results stay out of the report.
JANUS Pentest live view: the four-stage pipeline and the attack agent’s HTTP probesFull size ↗
Live run · the attack agent probing the target, step by step.

03 Enforce

JANUS Runtime Monitor Early Access

Enforces the SPEC and guard rules on every live action.

AllowBlockEscalateLog
Live decisionsairline-support-agent
12:04:31.204tool_callsearch_flights—ALLOW
12:04:33.918tool_callupdate_reservationR-01BLOCK
12:05:02.441tool_callissue_refundR-03ESCALATE
12:05:02.442llm_callreply_to_user—LOG
Illustrative example. Not customer data.
Sits
Between your live agent and its LLM & tool calls
Enforces
The SPEC · guard rules
Covers
Business-rule risk · traditional security risk
Stage
In production

04 Deployment

Runs where your agent runs.

Available as SaaS or on-premises.

Option A

SaaS

Hosted JANUS. Point it at your agent and start with an Audit.

Option B

On-premises

JANUS inside your environment, for agents and code that cannot leave it.

Let’s look at your agent.

Book a demo

or write to support@agentsure.tech