IDevSec

IDevSec is an India-based trust-infrastructure and security company focused on the emerging 'agentic web' — the ecosystem of autonomous AI agents that increasingly transact, execute tasks, and interoperate across systems. Its core thesis is that AI agents currently lack verifiable identity: there is no cryptographic proof of who owns an agent, whether it has been compromised, or whether it is who it claims to be. IDevSec positions itself as the layer that fixes this, describing its mission as building 'the cryptographic infrastructure for the autonomous web.' The company's flagship asset is the Creduent Protocol, an open standard for AI agent identity that uses Ed25519 signatures, DNS binding, and a public attestation registry, released under the Apache 2.0 license. Around this protocol IDevSec has assembled a three-part 'Trust Stack': the Creduent Protocol itself (open standard), IdentaBar (an open-source browser extension and VS Code plugin that scans pages and workspaces for agent declarations and verifies signatures locally), and an Enterprise Registry (a private, federated Creduent registry offered commercially under BSL 1.1 for organisations requiring data sovereignty and strict privacy alignment). Beyond software, IDevSec sells agentic infrastructure services, including Agent Identity Audits — mapping every agent in a deployment, assessing identity risk, and delivering a remediation roadmap — and Creduent Implementation engagements covering private registry deployment, agent.json schema design, Ed25519 key management, DNS TXT binding, and integrations with frameworks such as CrewAI, LangGraph, and AutoGen. The company emphasises a practitioner-led, security-first identity, stating that it was founded by Kashish Kanojia (also known as CyberFascinate), that its team has audited 20+ vulnerability programs, and that it delivers with its founding team only and zero subcontracting. IDevSec is registered as an MSME in Delhi, India, and operates globally, targeting organisations that are deploying autonomous agents faster than they can secure them.

IDevSec emerged from a security-practitioner background rather than a conventional enterprise-software lineage. Its founder, Kashish Kanojia (also known as CyberFascinate), came from vulnerability research and infrastructure security, and the company states that it was 'built by practitioners who secured infrastructure before agents existed.' That origin shapes both the company's product philosophy and its go-to-market: IDevSec presents itself as a protocol author and infrastructure operator rather than a pure consultancy, and it emphasises that it delivers with its founding team only and does no subcontracting. The company's formation is tied to a specific observation about the state of AI deployment: autonomous agents were proliferating across enterprise systems, but there was no standard way to verify their identity. As IDevSec frames it, 'AI agents are everywhere. Nobody knows if they are who they claim to be.' Every agent an organisation interacts with could lack verifiable identity, cryptographic proof of ownership, or any way to confirm it had not been compromised or spoofed. IDevSec's response was to build an attestation layer from the ground up, designed for high-stakes agentic workflows where trust failure is not an option. The centrepiece of that effort is the Creduent Protocol, an open standard for AI agent identity built on Ed25519 signatures, DNS binding, and a public attestation registry, released under the Apache 2.0 license. The protocol is documented through a series of specifications (CREDUENT-001 through CREDUENT-008) and is described as a live registry. Around it, IDevSec assembled what it calls the 'Trust Stack,' a three-layer ecosystem: the protocol itself as the open standard; IdentaBar as the client-side verification layer; and the Enterprise Registry as the commercial, data-sovereign deployment option. IdentaBar extends Creduent verification to where practitioners actually work. It is a browser extension (Manifest V3) and a VS Code / VSCodium plugin that scan web pages and workspace directories for Creduent agent declarations, resolve attestation certificates, and verify signatures locally. The browser client renders real-time trust badges — trusted, verified, expired, revoked, or unverified — while the VS Code client adds zero-trust task gating (blocking build, deploy, or run tasks when unverified or revoked agent keys are present) and a real-time directory watcher that re-verifies credentials whenever agent.json files change. IdentaBar is open source under Apache 2.0, with distribution through Firefox and planned Chrome and Edge stores, plus the VS Marketplace and Open VSX Registry. The Enterprise Registry is the commercial tier, licensed under BSL 1.1. It is a private, federated Creduent registry aimed at organisations that need absolute data sovereignty and strict data-privacy alignment — a recognition that many enterprises cannot rely on a public registry for agent identity. Alongside these products, IDevSec offers services: Agent Identity Audits that map every agent in a deployment, assess identity risk across endpoints, schemas, DNS binding, attestation expiry and revocation, agent-to-agent trust chains, and MCP integration posture; and Creduent Implementation engagements that deploy private registries, design agent.json schemas, manage Ed25519 keys and rotation, configure DNS TXT binding, and integrate with frameworks such as CrewAI, LangGraph, and AutoGen. IDevSec also cultivates an ecosystem and talent pipeline, referencing partners such as 0x0 PIR4T3S and describing a research hub and community layer alongside its services and software. The company is registered as an MSME in Delhi, India, and operates globally. Its public materials emphasise audited operational credibility — 20+ vulnerability programs audited, sub-50ms attestation speed targets, and a 'compliant by design' posture aligned with zero-knowledge-proof privacy approaches. As of its public launch materials, the Creduent Protocol registry is live and IdentaBar v1.0.0 is released, with Chrome and Edge store listings marked as coming soon.

• IDevSec founded by Kashish Kanojia (CyberFascinate), emerging from a security-practitioner background.

• Creduent Protocol released as an open standard (Apache 2.0) for AI agent identity, with specifications CREDUENT-001 through CREDUENT-008.

• Creduent Protocol v2.0 registry goes live.

• IdentaBar v1.0.0 released as an open-source browser extension and VS Code plugin.

• Enterprise Registry offered commercially under BSL 1.1 for data-sovereign deployments.

• Chrome and Edge store listings for IdentaBar marked as coming soon.

Trust infrastructure for the agentic web — cryptographic identity and attestation for autonomous AI agents, built by security practitioners.

• Creduent Protocol

  Open standard for AI agent identity using Ed25519 signatures, DNS binding, and a public attestation registry; Apache 2.0 licensed.

• IdentaBar

  Browser extension (MV3) and VS Code / VSCodium plugin that scans pages and workspaces for Creduent agent declarations and verifies signatures locally; Apache 2.0 open source.

• Enterprise Registry

  Private federated Creduent registry for organisations needing absolute data sovereignty and strict data privacy alignment; BSL 1.1 commercial license.

• Agent Identity Audit

  Service auditing AI agent deployments for identity and trust vulnerabilities, covering endpoints, agent.json schemas, DNS binding, attestation expiry/revocation, agent-to-agent trust chains, and MCP integration posture.

• Creduent Implementation

  Service deploying private federated Creduent registries, designing agent.json schemas, managing Ed25519 keys and rotation, configuring DNS TXT binding, and integrating with CrewAI, LangGraph, and AutoGen.

1. 1IDevSec — Trust Infrastructure for the Agentic Webidevsec.com
2. 2About IDevSec | Trust Infrastructure for the Agentic Web | IDevSecidevsec.com
3. 3Agentic Infrastructure Services | IDevSec | IDevSecidevsec.com
4. 4IDevSec IdentaBar | AI Agent Identity Verifier Browser Extensionidevsec.com
5. 5IDevSecwikidata.org