Unite is the defence layer that closes the loop. It combines detection, intelligence and automated response into one platform, so a verified coordinated campaign moves from alert to action in minutes - not the hours a manual handoff costs. For how the three layers fit together, see detection, intelligence, defence: the unified narrative-threat stack.
Content authenticity, built in
Deepfakes and narrative attacks are one threat, so Unite handles both. Defend scans a piece of media, by drag-and-drop, upload or a URL, and returns an explainable authenticity verdict in seconds: an ensemble manipulation probability, an authenticity band and a per-signal breakdown. No media is retained beyond the verdict metadata.
The same authenticity operations are agent-native. An analyst can ask an AI assistant to scan a URL, poll a scan, summarise a brand’s authenticity, or scan an account, executed through the platform’s governed tool surface: identity-scoped, permission-checked and audit-logged. The verdict sits alongside the behavioural and coordination signals for the campaign around the media, not as an isolated score. To understand the science, see how deepfake detection works; for the full picture, see synthetic media detection and Signal.
Governed by default: agents you can audit
Autonomous agents that act on your behalf are exactly what security and risk teams are paid to question. Most vendors ship agents and ask for trust. Unite ships agents whose every action is classed, capped, scoped and recorded. You do not have to trust our agents - you can audit them.
Four guarantees apply to every agent action, today:
- Risk-classed. Every tool an agent can call carries a declared risk class, from read-only through to outward-facing, so the blast radius of an action is known before it is taken. Low-risk actions run autonomously within capped playbooks; outward-facing actions are gated on human approval, and the classification is enforced server-side.
- Budget-capped. Credit-spending actions run inside a server-created budget context with a hard ceiling, enforced at the ledger rather than the prompt. An agent cannot outspend its cap.
- Identity-scoped. Your organisation’s agent activity is visible to your organisation alone. Isolation is enforced at the query layer, not the interface.
- Fully logged. Every tool call writes to a single audit spine: the identity that called it, the tool, the full arguments, a snapshot of the result, status and duration. Credentials are never logged.
This is LLM Protect - the policy and audit layer AI Uniti built underneath its own agents. It is not an add-on and it is not optional: it is on for every agent, every action, every customer. Inside Unite, the LLM Protect view shows the complete timeline of agent activity - what was invoked, with what inputs, what came back, and what it cost.
Customer-defined policies and active enforcement are on the roadmap; the audit layer they will control is already running.
For the wider discipline, read the access layer your LLM security stack is missing, what LLM guardrails cover and what they leave exposed, why prompt injection is not the biggest risk in your AI stack, the CISO’s guide to governing enterprise AI agents, building TrustOps for the AI era, and Replay: the fifth tenet of TrustOps.