The pre-production report for AI agents

How much will your agent cost?What’s the worst it can do?

Point Arceo at an agent and get back what it will cost, what it could break, and how sure we are.

Read-only
Beacon Support±15% · HIGH
Monthly cost
$0
$2,410–$3,270 projected
Blast radius
81/ 100
no chain yet
Live callswatching
32 chain rules armed · nothing flagged yet

Arceo fully supports these agents and tools

The problem

Pennies a call. Some of them you can't take back.

Every call your agent makes costs a few cents and carries a weight. Reading barely counts. Anything you cannot undo counts double.

CapabilityPer callBlast weight
payments.refundMoves money$0.03424irreversible
db.delete_recordsDeletes records$0.01830irreversible
contacts.readReads customer data$0.0121read-only
email.sendSends data outside$0.02114irreversible
Blast radius

One score for how much damage an agent could do.

Every action carries a weight. Add them up, double anything you cannot undo, and you get a number out of 100.

What each action is worth
Deletes records15
Grants access14
Runs code13
Moves money12
Changes production12
Reads credentials10
Turns off logging10
Exports in bulk9
Reads customer data8
Sends data outside7
Beacon Support
0/ 100
HIGH
LowMediumHighCritical

Anything a delete or a payment touches counts double, because you cannot take it back. Above 60, an agent needs a policy before it ships.

How it works

From connected agent to a signed-off number, in minutes.

01

Connect any agent

Point Arceo at an agent built on the Anthropic SDK, OpenAI, an MCP server, or a public GitHub repo. It reads only. No code changes, nothing leaves your stack.

02

Map what it can reach

Arceo lists every tool the agent can call, sorts each by risk, and works out the monthly cost from the model, the call volume, and real traces.

03

Hand the CFO one number

A monthly cost with a confidence range, a blast-radius score out of 100, and every dangerous chain the agent can run, including the ones that cross between agents.

Cross-agent chains

Two safe agents. One dangerous chain.

Agents hand work to each other. Arceo follows the handoff, so a sequence that is only dangerous across two agents still gets caught.

Two agents, each doing their own job
Support agentAnswers customer ticketsSafe on its own
Ops agentEmails and pages on-callSafe on its own
CHAIN DETECTEDNeither agent is dangerous alone. Together they move customer details outside the company.
What you get

Cost and risk, in one report your CFO will sign.

How the range tightensBEACON SUPPORT
Day oneAfter a sandbox runAfter a week of live traffic

A ceiling you can budget against, before it runs

Nothing has executed yet, so the range is wide — but the worst case is already a real number, not a guess.

Budget for$8.5k/moLOW CONFIDENCErange $1.4k–$8.5k
$2,840/mo estimate
$0$3k$6k$9k
On every pull request

The check that stops it before it merges.

Arceo runs as a GitHub Action. It scores every agent in the diff, posts the report as a comment, and fails the build when one crosses the threshold you set.

threshold60
runs onpush · pull_request
writesnothing (read-only scan)
feat/refund-automationmain#248
build1m 12s
tests2m 04s
Arceo Agent Security Scanrunning
Arceo Agent Security Scan…
Files scanned 12 · Agents found 3 · Max blast radius – · Critical chains – · Threshold 60
agents/support.pysupport-botscanning
agents/billing.pyinvoice-botscanning
agents/ops.pydeploy-botscanning
deploy-bot blast radius 82 exceeds threshold 60critical chain · changes production, then deletes records
Where we fit

Everyone else measures agents after you deploy them

Observability tells you what you already spent. Security tooling tells you what already broke. Arceo answers the question that gates deployment, before the agent goes live.

What Arceo is
  • Cost and risk for AI agents, in one report a finance team can sign off on
  • Pre-deployment: the answer arrives before the agent handles a real request
  • Platform-agnostic: Anthropic, OpenAI, MCP, GitHub, LangChain, or your own code
How Arceo differs
  • Evaluation platforms score answer quality; Arceo prices what the agent can reach
  • Security tools sell to the CISO; Arceo reports to the CIO and the CFO
  • Observability measures spend after deploy; Arceo forecasts it before

Arceo governs the agents you build.

Proof

Three things you can check before you trust the number

We are early. Every claim below is checkable against the product.

829
real API calls repriced

The cost model is backtested

We re-priced 829 real Anthropic usage records, captured independently of the forecaster, through the engine; the high-confidence tier reproduces the actual spend. The test runs in CI, so a change that breaks pricing fails the build.

32
risk-chain rules

The risk model is mapped to published frameworks

Chain detection runs on risk-label transitions, so it generalises across every tool and vendor. The rule set maps to OWASP Agentic Security categories and MITRE ATT&CK tactics: privilege escalation, credential access, defense evasion, and collection.

0
critical audit findings

The backend has been independently audited

A full security audit covering authentication, tenant isolation, injection, cryptography, dependencies, logging, and cost abuse returned zero critical findings. We share the report, and current remediation status, under NDA.

Read the security page
Book a walkthrough

Ship your agents with a number you can defend.

Bring your own agent. We will run it through Arceo live and show you the monthly cost, the confidence band, and every dangerous chain it can run.

30 minutes · read-only · no code changes