Free IDE extension for risk-free vibe coding — keep secrets out of AI.
Protect
PUT /api/projects/policyCentralized policy engine that defines how SoterAI should respond to different risk levels. Configure thresholds for blocking, redaction, approval workflows, and more.
Complete these steps in order. The dashboard link opens the exact product workspace for this service.
Sign in, select the project you want to protect, then open Policy Engine.
Create named policies with rules for different risk categories, thresholds, and actions (ALLOW, BLOCK, REDACT, APPROVE).
Use PUT /api/projects/policy from server-side code. Keep API keys out of browsers and client bundles.
Run one safe case and one expected-risk case. Confirm the result in Policy Engine, then review Guard Logs before enabling the control for production traffic.
Every organization has different risk tolerance and compliance requirements. The Policy Engine lets you fine-tune exactly how SoterAI behaves — from permissive monitoring-only mode to strict blocking of all risky operations.
A step-by-step breakdown of how Policy Engine protects your AI.
Create named policies with rules for different risk categories, thresholds, and actions (ALLOW, BLOCK, REDACT, APPROVE).
Each input and output is scored for risk across multiple dimensions — prompt injection, PII, secrets, toxicity, etc.
Risk scores are evaluated against policy thresholds to determine the appropriate action.
Create allowlists, blocklists, and exception rules for specific patterns, users, or contexts.
Separate thresholds for each risk type with independent actions
Different policies for development, staging, and production environments
Allowlist/blocklist specific patterns, IPs, user agents, or content types
Track policy changes with full version history and rollback support
This service is implemented at the application route below. Use the tested SDK and framework guides for copy-paste integration examples.
PUT /api/projects/policy. API keys must stay server-side. See the REST API guide and related documentation before integrating.