Welcome
Checkpoint protects your applications from AI agents and automated bots
Checkpoint is a comprehensive AI agent detection and protection platform. It identifies and manages automated traffic on your web applications with enterprise-grade detection, flexible enforcement, and identity-based governance for AI agents.
Why Checkpoint?
- Advanced AI Detection — State-of-the-art algorithms to identify AI agents, bots, and automated browsers
- Flexible Enforcement — Permit, block, redirect, challenge for consent, or require cryptographic identity (
INSTRUCT) — you decide how to handle detected agents - Identity Governance — Control what AI agents can access using KYA-OS
- Real-time Analytics — Monitor traffic patterns, detection trends, and agent activity
- Privacy First — GDPR compliant with configurable privacy settings
Platform Overview
See Core Concepts for the mental model behind these three pillars — how detection, enforcement, and identity fit together.
Detect
Identify AI agents and bots using client-side or server-side signals. Checkpoint supports multiple detection methods you can use independently or combine.
- Marketing Pixel — No-code, drop-in script tag
- JavaScript Beacon — Full-featured SDK with WebWorker support
Server-side and edge detection are documented with their enforcement counterparts — see Middleware and Gateway below.
Learn more about detection methods →
Enforce
Take action on detected agents with configurable policies. Start in observe mode, then graduate to blocking, redirecting, or challenging when you're confident in your detection settings.
- Gateway Enforcement — Edge-level enforcement via DNS
- Middleware Enforcement — Code-level enforcement in your app
- Policy Configuration — Fine-tune rules and thresholds
Learn more about enforcement →
Govern (KYA-OS)
Control what AI agents can access using identity-based governance. KYA-OS adds authentication, authorization, and consent to AI agent interactions.
- Delegation — Scoped, time-limited access grants
- Tool-Level Permissions — Per-tool scope requirements
- OAuth Integration — Standard OAuth 2.0 flows for agent auth
- Consent Management — User-facing consent pages
Choose Your Integration
Marketing Pixel
GTM-compatible pixel for marketing teams - no coding required
Beacon
Lightweight tracking beacon for any website with WebWorker support
Marketing Pixel
GTM-compatible pixel for marketing teams - no coding required
Beacon
Lightweight tracking beacon for any website with WebWorker support
Not sure which one fits your stack? Compare all integration methods to find the right fit.
Quick Start
Ready to install? Follow the Quick Start Guide to have Checkpoint running in about 5 minutes.
Architecture Overview
Checkpoint uses a multi-layered approach to detect and manage automated traffic:
- Detection Layer — Analyzes requests using user agent, TLS fingerprint, headers, and behavioral signals
- Classification Engine — Classifies traffic as
human,ai_agent,bot, orincomplete_datawith confidence scores (0–100) - Policy Engine — Evaluates enforcement rules (allow lists, deny lists, path rules, thresholds)
- Governance Layer — KYA-OS identity verification, delegation proofs, and scoped access control
- Analytics Layer — Tracks and reports detection metrics with session consolidation
Next Steps
- Getting Started — Core concepts and installation overview
- Quick Start — Get up and running in 5 minutes
- Integrations — Server, platform, and analytics integrations for an existing stack
- Cookbooks — Practical, step-by-step guides for common setups
- Dashboard — Navigate the Checkpoint dashboard
- API Reference — Complete REST API documentation
Support
- Email: kya@vouched.id
- Issues: kya+issues@vouched.id