The AI Security Layer for legal: append-only audit log for privilege defensibility, contained subprocess execution for AI legal research, privileged-data scrubbing before LLM calls, and matter-level access enforcement. All 4 platforms from $2,000/mo, billed annually.
Proactive protection against threats targeting privileged client data
Unauthorized access to attorney-client privileged documents via case management APIs. Matter-level RBAC, ethical-wall enforcement, and Zero Trust risk scoring on every request.
Bulk scraping of client matter data, billing records, and case files. Sliding-window rate limits + behavioral baselines flag enumeration attacks at the gateway.
Attackers manipulate eDiscovery APIs to alter document metadata or access restricted productions. Every access is written to the append-only audit log for chain-of-custody review.
API Security + MCP Security + AI Gateway + Verification Engine — unified on one finding bus for law firm workloads
Secure case management, document management, and billing APIs. Matter-level access control and ethical-wall enforcement at the gateway, with conflict-check API hooks.
Secure AI agents that assist with legal research and document drafting. Every tools/call passes 7 sequential checks — permission, MFA, rate limit, rug-pull (SHA-256), threat detect, forwarding, response scan — before touching client matters.
Route LLM calls for document review and legal analysis. Privileged-data scrubbing before LLM processing; adaptive Z-score circuit breaker for failover.
Validate every AI-drafted clause and research summary before it leaves your firm. Real-time checks on AI gateway traffic; a response carrying a critical PII or secret finding is blocked before delivery, streaming or not.
Zero code changes to your case management system or AI research stack. Target: Sub-5ms gateway proxy overhead on cached, single-region paths.
Not in Anthropic's MCP spec. Not in API gateways. Not in WAFs. Platform-level additions built for privileged-data workloads.
MCP servers the proxy launches locally (stdio, off unless the operator sets MCP_STDIO_SERVERS_ENABLED) run in their own session (setsid), drop to nobody if started as root, and get no-new-privs, ambient capabilities cleared and RLIMIT_AS/FSIZE/NOFILE/NPROC ceilings. Remote (HTTP) servers are proxied and inspected, not sandboxed, and network egress is not filtered.
SHA-256 hash of every research tool definition pinned at tools/list. On every tools/call, the cached definition is re-hashed and compared. Drift raises MCPRugPullDetectedError, blocks execution, and publishes a CRITICAL event.
Statistical, not threshold-based. Z-score > 3.0 against per-hour time-of-day baselines. 4 overlapping sliding windows (1m/5m/15m/1h). Progressive recovery (10→25→50→100%).
Findings from all four pillars land on one threat-event bus. A compound correlator groups them in 5-minute windows by correlation ID and by organization + client IP, and raises one incident when they match a known multi-stage pattern: a prompt injection at the gateway plus an SSRF probe and a path traversal at the API from the same client become a single critical Lethal Trifecta finding.
HMAC-SHA256 hash chain on authentication and domain events (since 2026-09-13), each entry signing the previous. Three verification levels (full chain / single entry / last-N). Control mapping (not an attestation) for privilege defensibility, eDiscovery chain-of-custody, and SOC 2 CC7.2.
Cross-session attack detection: 6-dimension risk score (max 110) across tool sensitivity, data volume, burst, denials, prior detections, and tool diversity. Catches coordinated multi-user attacks and 24h slow-and-low patterns.
Every pillar publishes its findings to one threat event bus. The compound correlator joins findings on the same request by correlation ID, and separate requests from one client by organization + client IP.
mcp_tool_calls with its correlation ID • Compound findings link every contributing finding • Hash-chain entries are tamper-evident for privilege defenseBuilt for every type of legal organization
Enterprise-grade security for large law firms. Protect multi-office deployments with global compliance requirements.
Secure in-house legal department APIs. Protect contract management, entity management, and outside counsel collaboration.
API security for LegalTech SaaS platforms. Protect multi-tenant data and ensure client isolation at the gateway.
Every privileged-data access written to the append-only audit log. Control crosswalk: each SOC 2 control is mapped to its overlapping ISO 27001 controls.
"-Ready" / "aligned" reflect capability posture. ABA Model Rules are an ethics framework, not a third-party certification; SOC 2 Type II observation in progress with external audit H2 2026.
Join law firms and legal tech companies using G8KEPR to protect privileged communications, secure AI legal research, and maintain client confidentiality with documented evidence.