Security for autonomous payments

Security control plane for autonomous payments on Base.

402 Sentry inspects payment intent, policy, destination, and protocol evidence before execution — beginning with x402.

View Demo See How It Works

Conceptual view

Agent payment request
402 Sentry Control plane
  • Network
  • Asset
  • Payee
  • Binding
  • Policy

Pre-execution policy boundary

Approve

Block

Execution on Base x402
Conceptual view of where 402 Sentry sits in the payment path. Not a record of an executed transaction.

The problem

Autonomous payments need a security boundary.

AI agents can initiate financial actions at machine speed. 402 Sentry adds a policy and evidence layer before execution.

  • Visibility

    Inspect

    Understand the payment request and the protocol context around it.

  • Control

    Enforce

    Apply policy before value is allowed to move.

  • Accountability

    Explain

    Produce structured decision evidence for approvals and blocks.

How it works

Four stages, one boundary.

Every request follows the same path through the boundary, start to finish, before execution rather than after it.

  1. Inspect

    Evaluate request, payment, destination, network, and protocol context.

  2. Decide

    Apply the Sentry policy boundary before execution.

  3. Evidence

    Record structured evidence explaining what was allowed or blocked.

  4. Execute

    Only approved requests continue toward the payment rail.

Core protections

Nine protections enforced before execution

Every payment request is evaluated against the same categories, before execution.

  • Spend Limits

    Bounds on how much value a request, or a run of them, is allowed to move.

  • Request Binding

    A payment has to belong to the request that asked for it.

  • Replay Protection

    A payment payload is good once, not twice.

  • Network Policy

    Only the chains you have named are accepted.

  • Asset Policy

    Only the tokens you have named can carry the value.

  • Payee Policy

    Only the destinations you have named can receive it.

  • Metadata Protection

    The metadata travelling with a payment is inspected, not trusted.

  • Facilitator Boundary

    Whoever settles the payment stays inside a declared trust boundary.

  • Settlement Finality

    An accepted response is not mistaken for a settled payment.

Architecture

Where 402 Sentry sits

Coming soon

Architecture diagram

Base x402

The rails it runs on

One network and one protocol, named exactly. Everything below is where 402 Sentry runs today — not a roadmap.

Network
Base
Environment
Base Sepolia (testnet)
Network identity
eip155:84532 CAIP-2
Protocol
x402 v2
Settlement asset
USDC on Base Sepolia
Protocol artifact Reserved

This frame is held for a real x402 artifact: a decoded 402 Payment Required challenge, its Base Sepolia protocol evidence, and a BaseScan reference once a funded run exists.

Nothing is shown here until that run has actually happened.

Arvin, founder of 402 Sentry
Arvin Bahrami Ethical Hacker

Founder

Why I built 402 Sentry

My background is in offensive security, where I’ve spent the past six years identifying vulnerabilities before they turn into incidents. As autonomous agents begin making real financial decisions, that same adversarial mindset helps me spot gaps in the agentic payment-flow infrastructure before they become larger problems. I built 402 Sentry to provide a control layer that can assess payment behavior and policy before value moves — bringing practical cybersecurity thinking to the infrastructure autonomous agents will rely on.

Explore 402 Sentry.

See the product in action or watch the founder pitch.

See the Demo Watch the Pitch

Get in touch