DEMO TRACE · LIVE CARD MARKUP
Leaky support agent
12/100
Charcoal
“Your agent put the API key on speakerphone.”
1 critical · 0 warning · 0 notice
Findings
1 signals · 1 categories- leaked secret
Redacted before this trace reached storage.
New Live ingest from the OpenAI Agents SDK
Security scanning for AI agent traces
Catch what your agents leak.
Flint scans every agent trace for leaked secrets, unsafe tool calls, and runaway costs, then redacts what it finds before storing anything.
OpenAI Agents
Live report UI · illustrative redacted demo trace
Integrations / LangSmith
Put your trace telemetry to work.
Connect LangSmith once and Flint keeps reviewing completed traces for secrets, brittle runs, and waste—without storing a raw credential.
Connect LangSmithAvailable now
LangSmith
Continuous redacted scans for the traces already in your workspace.
- First pass
- 24 hours / 50 traces
- Then
- Hourly scan cadence
- Credentials
- Encrypted server-side
Deterministic checks
What Flint catches
Concrete rules for trace data that should never reach production.
- OpenAI, AWS, GitHub, Slack, and Google API keys in span inputs, outputs, and tool arguments
- JWTs, bearer tokens, and private key blocks
- Emails and phone numbers passed through prompts
- Plain-http URLs in tool calls
- The same tool called 4+ times with identical arguments
- Traces that end in an unhandled error
- Duplicate LLM calls and repeated 2,000+ token prompt prefixes
- Single calls stuffed past 20k input tokens
One trace, clear findings
Find what will hurt you.
Security first. Reliability and cost next. Shareable evidence last.
01 / SECURITY
Detect and redact in one pass
Flint catches supported secrets in trace data and replaces them before storage.
02 / RELIABILITY
Loop and failure flags
Repeated tool calls and error tails become concrete findings, not dashboard noise.
03 / COST
Cost autopsy, measured vs estimated
Duplicate calls and bloated context show their waste with the source of each number.
04 / DISTRIBUTION
Roast cards for the timeline
Every scan has a shareable report card for the people who need to see it.
Live reports
Recent scans.
No public reports yet. Scan the first trace.
Scan a trace