Videos

Watch Vekil at work

Every video was recorded in the real product and runs about a minute. All are subtitled, so they work with the sound off.

Recorded in a demo environment: models and remote servers are samples; the addresses, keys and records on screen are not real.

Core tours

Six short videos showing what Vekil does on every call, end to end.

Overview and fleet0:59

How every number on the dashboard is computed from the evidence ledger, the fleet table and live events.

Personal data masking and the evidence ledger0:53

National ID, phone and email reach the model masked; the call is written to the ledger under the agent's name.

Human approval and the kill switch0:47

When policy asks for approval the agent waits; a misbehaving agent is cut off within a second.

Policy canvas0:52

Rules are built from blocks without code, compiled to Cedar and tested without touching live traffic.

Workflows0:52

A multi-step job: fetch, summarize, human approval and write back, with every step tracked live.

Compliance: KVKK and GDPR1:00

Legal deadlines, the processing record, impact assessments and erasure that keeps the chain intact.

Setup wizard

Connecting an application in four steps: model and provider key, agent, service key, first call.

Anthropic1:13

A Claude model; only the address and key change in the app.

OpenAI1:08

An application using the OpenAI SDK.

Google Gemini1:08

A Gemini model, with the same four steps.

Azure OpenAI1:13

With the deployment name and the resource endpoint.

Connector auth types

An agent's calls to external APIs: the credential is added from the vault, and secret echoes in responses are masked.

No credential0:50

Even an open API is registered as a destination.

Single header0:58

APIs that expect the key in one request header.

Multiple headers0:55

Several credential headers, such as an app key and an app secret.

Bearer token0:52

A token in the Authorization header, the most common form.

Basic auth0:54

Systems protected by a username and password.

Query parameter0:57

APIs that expect the key in the URL.

Passthrough0:49

The app carries its own credential; inspection still runs.

MCP1:00

Tools from several MCP servers merged behind one endpoint.

Browser headers0:50

Referer and Origin don't reach the remote server by default; an administrator turns them on where needed.