Verifying is free. Proving is the product.

Anyone can check an Interlok bundle without paying us. Evidence Connect signs and grades what your gateway already records. Gate adds holds for a named person on the actions that matter.

$0

Free · scan and verify

Map what your agents can reach, publish a badge, and verify any Interlok bundle offline, without an account.

Run free scan
Per event

Evidence Connect · keep your gateway

Signed, graded evidence from PolicyLayer, Runlayer or any gateway, with the Evidence Room, Proof Export and an auditor bundle mapped to SOC 2, ISO 42001 or NIST SP 800-171. Priced per recorded event; contact us for a quote.

Talk to us
$499

Gate · from, per month

Everything in Evidence Connect, plus holds for an IdP-verified person on agent actions, deploys and access grants. Starts in shadow mode so you see what would hold before you enforce.

Start Gate

How Evidence Connect works with your gateway

Interlok sits behind PolicyLayer, Runlayer or any other gateway, signs what reached your servers, ingests the gateway's own decision records, and grades every record by what it actually proves. Gateway logs vs signed evidence · PolicyLayer · Runlayer · Any gateway

FreeEvidence ConnectGate
Posture scan and public badgeincludedincludedincluded
Offline verifier for any bundleincludedincludedincluded
Signed, graded evidence from your gateway—includedincluded
Evidence Room, Proof Export and auditor links—includedincluded
Auditor bundle mapped to SOC 2, ISO 42001 or 800-171—includedincluded
Inline gate with shadow mode to start——included
Human hold and IdP-verified determination——included
Change and access gates (deploys, grants)——included
SOC 2, ISO 42001 and CMMC / 800-171 packs—attest onlyincluded

Latency, in writing

An automatically allowed verdict returns in p50 8 ms, p95 25 ms measured at the gate handler. A held action waits for a human and is not part of that figure. If Interlok cannot reach its database, each connection fails closed by default — the tool call fails rather than running ungoverned — or fails open and queues for retroactive ledgering if you choose that per connection.