KYDE
STATUS
SEED ROUND OPEN
TARGET
€1.6M
KYDE.COM
CONFIDENTIAL
Legacy AI built workspaces for humans. We are building the infrastructure for a world without humans in the loop.
WORKFORCE COMPOSITION OVER TIME
RSAC 2026 CONSENSUS
"The industry just realized that autonomous agents act like digital employees, but we secure them like basic software."
THE SHIFT
Agents don't need UIs, they don't wait for human permission, and they execute at machine speed.
THE GAP
The enterprise lacks the operational System of Record to govern a workforce that operates entirely via APIs and MCPs.
Agents amplify existing risks while creating massive new blind spots. Enterprises cannot answer three critical questions:
IDENTITY HIJACKING
We don't know who is acting.
Agents share global service accounts. No traceable roles or accountability. When something goes wrong, attribution is impossible.
OVER-PERMISSIONING
Intern-level access, enterprise-level risk.
A research agent has the exact same API access as a critical finance agent. Token budgets explode. Databases are exposed. No scope boundaries enforced.
TAMPER-EVIDENCE
Logs that fail in court.
Self-reported, vendor-provided logs that fail the EU AI Act and fail in court. A compromised agent can simply rewrite its own log.
Developers build the Agent Core. KYDE provides the Multi-Tenant Firewall. We translate chaotic deployments into governed, accountable infrastructure.
ARCHITECTURE
YOUR AGENT FLEET
Custom enterprise agents, MCP clients, external integrations
KYDE — MULTI-TENANT FIREWALL
Identity · Role Mapping · Budget · Signing · Ledger
ANY LLM PROVIDER
OpenAI · Anthropic · Gemini · Mistral · self-hosted
THREE ENFORCEMENT PILLARS
↳ BEHAVIORAL ROLE MAPPING
We translate chaotic agent deployments into standard behavioral profiles — Observer, Executor, Orchestrator. Every agent knows exactly what it is permitted to be.
↳ LIABILITY FIREBREAKS
Real-time (<100ms) structural enforcement. Strict API/Tool boundaries, Token-Limits, and Time-Windows — enforced outside the agent's process.
↳ TAMPER-EVIDENT LEDGER
Every transaction SHA-256 hash-chained. Mathematically proven chain of evidence for BaFin, DORA, and EU AI Act compliance.
KYDE sits as an application-layer proxy. One environment variable. The entire fleet is instantly governed.
DEPLOY IN 30 SECONDS
$ export OPENAI_BASE_URL=https://kyde.intranet/v1
# Zero SDKs. No code refactoring. Agent sees no difference.
↳ CISO WINS
Instant visibility and control over the "Shadow AI" fleet. You have 47 uncontrolled agents — now you govern all of them.
↳ DEVELOPER WINS
Provider-agnostic. Switch LLMs instantly. Zero refactoring. Governance stays intact across every model change.
↳ COMPLIANCE WINS
Audit trail active from day one. EU AI Act, DORA, NIS-2 coverage from the moment the proxy is up.
Every competitor watches agents after the fact. KYDE governs them deterministically before the action lands.
BEHAVIORAL ANALYTICS
e.g. Geordie AI
They observe agent behavior after the fact. But when an agent drains an API budget at machine speed, watching is too late. Post-hoc visibility is not control.
SEMANTIC FILTERS
e.g. Alinia AI
They use expensive LLMs to read text payloads. Too slow and too costly for real-time M2M transactions. A stochastic defense against a deterministic threat.
LEGACY GATEWAYS
MuleSoft, Cisco
Blind to agent context, behavioral roles, and token budgets. Built for human-facing services. Cannot enforce scope boundaries that don't exist in their data model.
KYDE'S EDGE
Deterministic. Network layer.
We block unscoped tools and budgets at the network layer, in milliseconds. Not probabilistic classification. Hard enforcement. The policy layer cannot be reasoned with.
Land with a problem the CISO already has. Expand as the fleet grows. Own the standard.
PHASE 1
LAND
Shadow AI Detection
Offer the CISO instant visibility. "You have 47 uncontrolled agents operating on delegated credentials."
No budget approval needed. Security already knows it's a problem.
PHASE 2
EXPAND
Agent Role Governance
Activate Kyde Control — instantly restricting the fleet via role-based access control and budget envelopes.
Revenue expands automatically as the agent fleet grows. Zero additional CAC.
PHASE 3
OWN
The Industry Standard
The Kyde Role Protocol becomes the portable, verifiable identity layer for B2B agent-to-agent communication.
The governance layer for single-enterprise use becomes the interoperability standard for the agentic economy.
Hard enforcement. No LLM in the loop. Milliseconds.
audit_entry.json
{
"agent_id": "finance-agent-7f3a",
"role": "executor::finance",
"action": "tool_call::get_invoice",
"budget": {
"limit_tokens": 50000,
"used_tokens": 12847,
"financial_limit": "€50,000"
},
"signature": "ed25519::a9f2...",
"prev_hash": "sha256::3c8b...",
"timestamp": "2026-03-27T09:14:02Z"
} ↳ IDENTITY ISOLATION
We break up global service accounts. Every behavioral role gets dedicated API keys managed exclusively by Kyde. Full attribution — always.
↳ TOOL & SCOPE ENFORCEMENT
The Marketing Agent simply cannot see or call the Banking API. We drop the request before it reaches the external system.
↳ BUDGET ENVELOPES
Strict token and API-call limits per role. The research bot stops at its $50 budget. Production systems are protected by hard limits, not agent judgment.
Charge for the machine, not the human.
THE REVENUE ENGINE
Platform Base Fee + Usage-Based License per active agent role / traffic volume.
As the enterprise agent fleet proliferates, KYDE scales automatically. No extra CAC as internal agent usage grows.
THE STRUCTURAL LOCK-IN
Premium Vault Retention — 3 to 7 years of cryptographic audit trails. Mandated by EU AI Act and DORA.
Once anchored in Kyde, migration is structurally impossible.
UNIT ECONOMICS
High-margin infrastructure with guaranteed NRR expansion.
Fleet growth = automatic revenue expansion. No additional selling motion required.
Intelligence is becoming a commodity.
Trust is not. KYDE builds trust.
The same root of trust that satisfies a court satisfies a substation.
PHASE 1 & 2 — NOW
Securing digital workflows via software proxy. Every tool invocation, every MCP action — policy-enforced and logged.
PHASE 3 — 2027+
The Silicon Leash. Anchoring the KYDE trust layer directly into hardware via HSM / PKCS#11. The cryptographic root of trust for agents in the physical world.
THE CATEGORY
Okta manages human identity. Workday manages the human workforce.
KYDE manages the autonomous workforce.
Power grids. Logistics hubs. Critical cyber-physical systems.
Securing authority delegation to agents in the physical world.
SEED ROUND
€1.6M
↳ MILESTONE 1
5 contracted enterprise pilots. €250k+ ARR run-rate by month 12.
↳ MILESTONE 2
Production-grade multi-provider policy engine. Sub-100ms at scale.
↳ MILESTONE 3
Trust & Certification — ISO 27001. BSI audit initiated.
Jörg Radehaus
GTM & STRATEGY
18y regulated enterprise GTM. Built Europe's first digital life insurance (0→1). Allianz, BMW, Google.
Jürgen Eckel
INFRA & CRYPTOGRAPHY
15y cryptographic governance for distributed systems. Full stack Rust. Global enterprise networks.
Intelligence is becoming a commodity.
Trust is not. KYDE builds trust.
SEED ROUND OPEN
€1.6M TARGET
EU AI ACT ENFORCEMENT
AUG 2, 2026
CONFIDENTIAL