Join the waitlist
Tell us about the AI applications and agents you want to test. Reinstator is available by waitlist, and we will be in touch by email.
Questions
Something not covered here? Ask in the note field when you join the waitlist.
What can Reinstator test?
AI applications and tool-using agents you own or are authorized to test, reached through an OpenAI-compatible chat endpoint or a JSON agent gateway contract. Test cases cover tool routes, indirect channels such as retrieved documents and tool outputs, and persistent state such as memory, policy, workflows and skills.
Do you need production access?
No. Reinstator reaches only the endpoints your plan authorizes, so you can point it at a staging or test environment. It never executes your tools. Your gateway runs them inside the isolated test sessions it provides, and every attempt starts a fresh one.
What is fresh-session replay?
When an attack succeeds, the exact winning messages run again in one to five new sessions, as your plan sets. The result becomes a finding only if every replay reproduces it.
Where is evidence stored, and who can read it?
In Reinstator's encrypted evidence store, bound to your tenant and job. Plans, transcripts, findings and reviews are encrypted; IDs, status and timestamps stay in plaintext so jobs can be queried. Only reviewers can read raw transcripts, and every read is logged.
How is spend capped?
Every call's declared cost ceiling is reserved against the run's budget before the call is sent. A run stops rather than send a call that would exceed its request or dollar budget, and it stops when its time budget runs out.
Does Reinstator block attacks at runtime?
No. Reinstator tests the boundaries your agent enforces. It does not sit in front of your agent or block traffic.
What has been validated so far?
The attack runner, evidence store, human review and release gate have been exercised end to end against synthetic test agents. Reinstator has not yet been run against a customer agent. See Product status.
Do you map findings to OWASP or MITRE ATLAS?
Not yet. Findings are organized by the boundary that failed, such as tenant isolation, tool authorization or untrusted context.
How do I get access?
Reinstator is available by waitlist. Join with your work email and tell us what you want to test. We will be in touch by email.