Inspect agent traffic. Block unsafe actions. Keep the logs.
Start free on Gateway in your network: block unsafe tool use, keep CRA-ready logs you can export, and cap agent spend by workload — not seats.
Talk to us · Need Finding → Fix Spec → PR? Request a remediation POC — scoped, not the self-serve product.
Security
Stop poisoned tools, over-scoped access, and unsafe agent actions at runtime.
Compliance (CRA)
Keep logs you can export for vulnerability handling and Article 14-style duties.
Cost
See spend by agent, team, or project — and set caps.
Runtime security
Agents fail when tools are poisoned, over-scoped, or invoked with attacker-controlled context. Gateway inspects tool calls and blocks unsafe actions before they land — not after a dashboard lights up.
CRA-ready logs
When you must show what you knew and what you did, you need logs you can export. Gateway captures evidence for vulnerability handling and Article 14-style duties. It does not replace legal advice or declare your product in or out of CRA scope.
Spend by agent, team, or project
After security and evidence, attribute spend and set caps. Watching a bill without a cap is not control.
Frequently asked questions
- What is UnitOne Gateway?
- Gateway inspects AI agent traffic in your network. It blocks unsafe tool use, keeps logs you can export for CRA-style duties, and attributes spend by agent, team, or project.
- Does Gateway deploy in our network?
- Yes. Gateway deploys in your AWS VPC, Azure VNet, or GCP project on Free, Team, and Enterprise. Agent traffic stays in your environment; you do not have to send it through a shared public proxy.
- How does this help with the Cyber Resilience Act?
- Gateway logs and exports evidence for vulnerability handling and Article 14-style reporting: what happened, which agent or tool was involved, and what was blocked. That is operational evidence, not a legal determination of CRA scope. See our Article 14 checklist for the reporting clock.
- Is cost control the main product?
- No. Cost dashboards are common. Gateway starts by stopping unsafe agent behavior and keeping CRA-style logs, then attributes spend so you can set caps.
- Is intent-preserving remediation part of Gateway?
- Finding → Fix Spec → PR is a scoped proof of concept, not the self-serve product. Request a remediation POC separately. Gateway is what you start free.
- Gateway vs MCP scanner — what does UnitOne Gateway do?
- Gateway inspects live agent traffic in your network and can block unsafe tool use. An MCP scanner grades a server before you connect it. The scanner is a legacy helper, not a Gateway SKU. See Gateway vs MCP scanner.
- How do I start a Gateway trial?
- Start free on the plans page. Free is $0: 10 agents (workloads, not seats), 2 seats, 25,000 events, Gateway in your network. Team is $99/month. Enterprise is talk to us.
Start free
Block unsafe tool use, keep CRA-ready logs, and cap agent spend. Free includes Gateway in your network, 10 agents, 2 seats, and 25,000 gateway events per month. Checkout is $0. After checkout you get deploy and login steps.
Start free