Live on EigenCompute TEE

Audit code without
ever seeing it.

BlindGuard is a security agent that runs inside an EigenCompute TEE. Your source code goes in, a signed vulnerability report comes out. The code never leaves the enclave.

Install it on your repo. Every commit, every release gets audited automatically. You get the guarantee that the code being operated is safe, without anyone ever reading it.

Try Live Audit Install GitHub App
Built for the EigenCloud Open Innovation Challenge
Live Demo

Try it yourself. Right now.

Paste code or enter a public GitHub repo URL. BlindGuard analyzes everything inside the TEE. The code never leaves the enclave.

Connected to TEE at 34.187.234.237
your-code.py
audit-report.json
๐Ÿ›ก๏ธ
Paste code or enter a repo URL
Analysis happens inside the TEE enclave
How It Works

Code in. Report out. Nothing else.

The entire analysis happens inside a hardware isolated enclave. No one, not even BlindGuard's operators, can access your source code.

๐Ÿ“ค

Upload

Code enters the TEE enclave via encrypted channel

โ†’
๐Ÿ”

Analyze

Static analysis + EigenAI LLM inference inside the enclave

โ†’
๐Ÿ“‹

Report

Signed vulnerability report + cryptographic attestation exits

โ†’
โœ…

Verify

Anyone can verify the audit without seeing the code

GitHub Integration

Install once. Every commit is safe.

BlindGuard ships as a GitHub App. Install it on any repo, public or private. Every push and every release triggers a full security audit inside the TEE. Results show up directly on your commits.

โš™๏ธ

Install

Add BlindGuard to your repo with one click

โ†’
๐Ÿ“ฆ

Push

Every commit and release triggers an audit automatically

โ†’
๐Ÿ”’

Audit

Code is analyzed inside the TEE, no one sees it

โ†’
โœ…

Report

Signed attestation posted as a commit comment

Install on Your Repo
Agent Identity

Four pillars of trust.

Every BlindGuard audit is fully auditable. The agent's identity is defined by its code, data commitments, upgrade policy, and persistent state.

SHA-256

Code Hash

The Docker image digest is included in every TEE attestation. Anyone can verify the exact code that ran.

COMMIT

Data Commitment

A hash of the input code is computed before analysis. Proves what was analyzed without revealing it.

SEMVER

Upgrade Policy

Manifest enforces semantic versioning. No silent changes. Every upgrade requires a version bump.

STATE

Persisted State

Full audit history in TEE encrypted storage. Every analysis leaves a verifiable trail.

Threat Model

Honest about what we do and don't prevent.

What We Prevent

โœ“ Code theft or leakage by the auditor
โœ“ Tampered analysis results
โœ“ Silent agent upgrades
โœ“ Forged or falsified reports
โœ“ Non deterministic results

Known Limitations

โ€” TEE hardware side channel attacks
โ€” AI hallucinations or missed vulnerabilities
โ€” Denial of service on EigenCompute
โ€” Code quality beyond security scope

Verified on EigenCompute.

Check our verifiable build and deployment on the EigenCloud dashboard.

View TEE Dashboard
View on GitHub