Kysira Documentation¶

Kysira hunts and kills attacks in milliseconds using AI-powered intent analysis before it can touch your application, data, or customers.

Deployment is safe¶

Kysira is built to be safe to turn on and instant to turn off:

• Zero app changes. Kysira sits in front of your app as a proxy, sidecar, or gRPC filter resulting in no code changes, no SDK to integrate.
• Shadow mode by default. New deployments score and log every request but never block traffic. You can run shadow for as long as you want before enabling enforcement.
• Fail-open. If Kysira is unreachable or times out, the request passes through unmodified and a Kysira outage never becomes an application outage.

How it works¶

Every inbound request is scored by a combination of ML models and an advanced processing layer covering the full OWASP Top 10 and Zero days. The score drives one of two actions:

• Shadow mode — request passes through; score and reason are logged and surfaced in the dashboard. Safe for initial rollout with zero traffic risk.
• Active mode — requests above the kill threshold are blocked with a 403 before reaching your application.

Deployment models¶

Kysira integrates at whichever layer makes sense for your infrastructure:

Get started¶

• New here? Follow the Quickstart — local and minikube paths, under 10 minutes.
• Deploying into a customer cluster? See the Client deployment guide.
• Already running Grafana or Datadog? See Observability — Kysira is discoverable with a single values flag.

Components¶