Everything you need to know about RaksHex. Can't find your question? Email us.
Setup takes less than 5 minutes. You can import your Postman or OpenAPI collection to start scanning immediately, or integrate our SDK with a single line of code.
No. We do not store request or response bodies. All security scanning and PII detection is performed in-memory, and only metadata (such as paths, latency, and token counts) is persisted. For strict privacy requirements, we offer self-hosted deployment.
We support major frameworks including PCI DSS v4.0.1, SOC 2 Type II (Trust Services Criteria), HIPAA, OWASP API Top 10, and OWASP LLM Top 10.
You can configure budget thresholds, anomaly detection scores, or prompt injection blocks. When a policy is violated, RaksHex blocks further API calls to the LLM within milliseconds, preventing cost overruns and data leaks.
We support all major providers, including OpenAI, Anthropic, Google Gemini, Cohere, Mistral, Groq, and AWS Bedrock.
Snyk scans static code dependencies, and Datadog provides general APM metrics. RaksHex is built specifically for AI runtime governance—analyzing LLM inputs/outputs in real-time, detecting prompt injections, managing token budgets, and mapping anomalies to compliance clauses.
Yes. We offer a Docker Compose setup and Kubernetes Helm chart for self-hosting within your private cloud or on-premise infrastructure.
When you approach your plan limits, we send warning notifications. If you exceed them, we provide a grace period depending on your plan. For continued high usage, your account will be capped or you will be prompted to upgrade to a higher tier.
For models with reasoning tokens (like OpenAI o1/o3 or DeepSeek R1), RaksHex parses the raw API response, isolates the thinking tokens, and attributes their exact cost separately from standard output tokens.
Yes. We offer a 14-day free trial for the Pro plan, with no credit card required. You can experience advanced scanning, Slack alerts, and team features immediately.
Yes. You can export complete, auditor-ready compliance reports and raw scan evidence in PDF, JSON, and CSV formats.
You can use our official GitHub Action to automatically scan API collections and check for security regressions or shadow endpoints as part of your CI/CD pipeline.