See every call,

and act on it where your teams work.

One audit trail for every agent, streamed and exported to the tools you already run. Signed events reach anything that needs a response.

Audits

The event trail, after the fact and live. One vocabulary for every call: agent, caller chain, target, arguments, rule version, outcome. Reconstructing what an agent did is one query. The same trail streams live, and exports continuously or on a schedule to the SIEM and observability tools you already run.

Investigate a decision

Find the request and the context behind its outcome.

Follow related activity

Inspect the available chain or correlation identifiers across actions.

Send evidence where teams work

Export the supported audit record to configured destinations.
dome — bash
dome audit query --results denied --since 24hdome audit chain act_9f2k1pdome audit stream --types tool.call,model.calldome audit export --format ocsf --since 7d

Integrations

The systems Dome composes with. SIEM, observability, incident and automation tools. Dome runs alongside what you operate: the audit trail and events land where your teams already look.

Bring identity into a request

Use a supported identity provider to verify the person behind an agent action.

Send records to your operational systems

Connect audit or event delivery to a supported destination.

Find a supported connection

Browse runtimes, clients, tools, models, and providers by the job they support.

Webhooks

Signed events pushed to your endpoints. Subscribe to the event types you care about and receive them signed, with retries and replay. A denial reaches an on-call channel or a runbook without anyone polling.

Subscribe to relevant events

Choose the types of activity that should leave Dome.

Verify the delivery

Check the event's signature at the receiving endpoint.

Investigate a failed attempt

Inspect delivery status and use the supported retry or replay workflow.
dome — bash
dome webhooks subscriptions create siem \  --url https://siem.example.com/dome \  --event-type tool.call --filter 'result=denied'

Every agent you run, under one system of control.