Immunefi

VulSight is a security company focused on controlling payments initiated by AI agents. Its payment authorization framework places an independent policy check between an agent’s proposed transaction and the systems that execute it. Before a payment can be signed, VulSight evaluates the exact action against customer-defined rules, including recipient, asset, network, amount, budget, and expiry. It returns an allow, hold, or deny decision with a reason and evidence record.

The framework is designed to keep financial authority outside the AI model. Agents submit typed proposals without access to raw signing keys or control over policy, while an isolated, customer-controlled signer authorizes only the approved payload. Changes to bound transaction details require fresh authorization. VulSight supports payment flows involving cards, banks, stablecoins, and x402, and records execution and settlement status.

The company also provides security research and vulnerability disclosure, with public blockchain security findings and advisories. Its security pilot service helps teams map an agent payment flow, test adversarial scenarios in shadow mode, and assess enforcement decisions without moving customer funds during validation.