Open source
Open source,
built on the same graph.
The CLI, the SDKs, the browser extension and the agent adapters Whisper publishes on GitHub, plus the datasets and libraries behind them.
Most of it needs no sign-in, and the graph answers on the keyless tier. The MCP server and the examples on this site take a free key.
That domain looks right. Guard checks whether it is.
Guard puts a mark in your toolbar that answers one question on every page: is this site really who it says it is? It checks the name against 800+ imitated brands on your device, and against the Whisper graph. Only the hostname ever leaves your browser.
Only the hostname is checked. Never the page, the path, what you type or your history.
How the verdict is reached
Guard checks the site's name on your device first, then confirms with a graph lookup that sends only the hostname.
Free, no account needed
Install it and Guard works right away. Sign in free to add the fleet view across every device you manage.
For teams and MSSPs
Roll Guard out to a fleet and read every verdict in one console.
Install and go.
One binary or one install command, in the language you already use.
The CLI
One signed binary: Cypher, named recipes and a local MCP server.
Node SDK
npm i whisper-id: a routable Whisper identity for any Node agent.
Python SDK
pip install whisper-id: the same identity for any Python agent.
Edge SDK
whisper-edge: dependency-free, for serverless and edge runtimes.
Homebrew and Scoop
brew install whisper-sec/tap/whisper, or the Scoop bucket on Windows.
GitHub Action
setup-whisper installs the CLI in a workflow and can connect an identity.
Inside your stack.
Kubernetes, n8n, Dify, OpenCTI, MISP and Wazuh, connected to Whisper identities and the graph.
Kubernetes operator
One namespace label gives a pod its own Whisper identity, via a Helm chart.
n8n community node
Verify and resolve agent identities inside an n8n workflow, with no code.
Dify plugin
Agent-identity verification and RDAP lookups for Dify agents and workflows.
OpenCTI connector
Enrich OpenCTI observables from the Whisper graph.
MISP module
An expansion and hover module, shipped inside misp-modules.
Wazuh connector
Installed from the GitHub releases. It is not in the Wazuh catalogue yet.
Inside your agent.
MCP tools, Agent Skills and framework adapters for the agents you run.
The hosted MCP server
Seven read-only tools over the whole graph, at mcp.whisper.security.
Agent Skills
A SKILL.md file that teaches an agent runtime to use the graph well.
Six framework adapters
Claude Code, Gemini CLI, Antigravity, OpenAI Codex, GitHub Copilot CLI and Pi.
Programmatic sign-up
Two HTTP calls to a working key, built for agents: no browser and no human in the loop.
On the device.
The same CLI, cross-compiled for routers, embedded Linux and microcontrollers.
OpenWrt feed
An ipk feed that gives a router its own routable IPv6 identity and safe egress.
Yocto layer
meta-whisper, for embedded-Linux boards such as Raspberry Pi, Zynq and PolarFire SoC.
Buildroot tree
A BR2_EXTERNAL tree that adds the Whisper CLI to any Buildroot image.
Embedded C core
A portable C99 identity core for microcontrollers, with Raspberry Pi Pico and NXP wrappers.
Data and libraries.
The datasets and the libraries behind the rest of it.
visual-confusables
Look-alike codepoint pairs, rendered through the fonts browsers actually paint. CC BY 4.0.
whisper-catalog
Every graph query and read flow as one machine-readable catalog.json, for SDKs, CLIs and MCP servers.
STIX 2.1 for Java
A STIX 2.1 library for Java with builders, validation and a pattern parser. BSD-2-Clause.
The graph answers without a key.
Send a Cypher query to graph.whisper.security/api/query with no key and you get real rows back. The MCP server and the examples on this site take a free key, which the console issues when you sign up. The Community plan stays free. See what the paid plans add on Pricing.
Start with the tools. Add a free key when you want more.
Community is free forever.