Attackers resell your tokens.Vectoral stops them.

30ms classification score

24/7 live abuse intel feed

Vectoral overview dashboard showing requests scored, requests blocked, high-risk count and tracked accounts over 24 hours, a world map of active request locations, and a recent activity table listing each scored request with its origin, risk pattern, score, and verdict

The Vectoral platform

Built to catch resellers —
before they bleed your bill.

Behavioral fingerprints, request-graph clustering, and abuse-network intelligence flag reseller traffic the moment it routes through your endpoints.

Detect

Every request is fingerprinted and scored on arrival, then streamed to the detect log with the signal that tripped it — blocked, challenge, or clean.

detect

detect_logs.v1

Decide

Every scored request lands in recent activity with its score, the pattern that drove it, and a verdict — blocked, review, or allowed.

decide

recent_activity

timeaccountoriginpatternscoreverdict

14:23:07acct_9f21ashburn, usaccount_count_for_ip0.914blocked

14:22:51acct_3c0afrankfurt, detoken_velocity_burst0.782blocked

14:22:44acct_71beaustin, usalways_on_pattern0.516review

14:22:30acct_04d7toronto, ca—0.108allowed

Block

Sort users by spend, find the account burning your bill, and block it. Every future scored request for that account is denied.

block

spend_per_user

accountspendrequestslast seen

acct_9f21$412.8018,20445s agoBlock

acct_3c0ablocked$301.1512,88012m agoUnblock

acct_71be$96.423,1103h agoBlock

Alert

Inline decisions in under 50 ms — throttle, rotate keys, or refuse calls before the tokens are ever spent.

alert

alert_engine

nameconditiondestinationlast firedstatus-

abuse spikeHigh-risk score count ≥ 1000 in 1 hourhttps://slack.com14:02:42 UTCenabled

runaway accountAccount spend (USD) ≥ $500 in 24 hourshttps://pagerduty.com06.24 09:14 UTCenabled

budget guardTotal spend (USD) ≥ $5,000 in 24 hourshttps://api.opsgenie.com06.22 18:33 UTCpaused

burst abuseHigh-risk score count ≥ 250 in 15 minuteshttps://api.discord.com06.21 12:13 UTCenabled

Built for real-time

Inline detection on every request, in milliseconds.

0ms

Median decision latency

Signals per classification

Prompt content stored

Attack patterns we shut down

Every way attackers monetize your LLM endpoints.

Token reselling isn't one attack — it's a supply chain. Stolen keys, leaked credentials, proxy software, abuse marketplaces. Vectoral covers all of it under one detection engine and one set of policies.

Proxy traffic

Detect requests being tunneled from third-party services and resold as cheap model access on grey-market AI sites.

Stolen API keys

Catch leaked or scraped credentials being replayed against your endpoints from foreign IPs and known abuse networks.

Automated harvesting

Block headless clients running token-extraction scripts to feed reseller inventory in bulk.

Wrapper services

Identify unauthorized chat UIs and downstream APIs proxying your endpoint without your consent.