# Unwhisper

> Unwhisper is a firewall for AI / LLM inputs. It inspects text, chats and files
> — including PDFs, images, Office documents and archives — and returns a clear
> PASS/FAIL verdict before the content ever touches a large language model. One
> REST call in, one verdict out.

Unwhisper exists because a model reads more than a human reviewer does. An
uploaded CV, invoice, support email or web page can carry instructions aimed at
the model rather than the reader: white or tiny text in a PDF, words buried in
image pixels, Base64-encoded payloads, or attacks written in another language.
Unwhisper unpacks, decodes, OCRs and normalises the content, then scores it with
custom-trained classifiers — deliberately not LLMs — so the decision does not
inherit the weakness it is defending against.

It is a security tool sold to organisations; sign-up requires a work email.

## Start here

- [Unwhisper](https://unwhisper.ai/): what it does, how it works, and the
  third-party test results with their exact scope and qualifications.
- [Documentation](https://unwhisper.ai/docs): overview and quickstart.
- [API reference](https://unwhisper.ai/docs/api): endpoints, parameters, the
  full response body, credits, rate limits and error handling.

## For machines

- [OpenAPI 3.1 spec](https://api.unwhisper.ai/api/v2/openapi.json): the
  machine-readable contract for the hosted API. Public, no key required, so it
  can be fed straight to a client generator. Every API response also advertises
  it via a `Link: …; rel="service-desc"` header.

Calling it, in short: `POST https://api.unwhisper.ai/api/v2/scan` with the raw
bytes as `application/octet-stream` and your key in an `X-API-Key` header. No
multipart, no Base64, no SDK. The verdict is `status`, `PASS` or `FAIL`; the
per-region hits are in `detections`. Add `?filename=` when sending a file. Cost
and remaining balance come back in `X-Credit-Cost` and `X-Credits-Remaining`;
rate-limit state in the `X-RateLimit-*` headers.

## Plans and deployment

- [Pricing](https://unwhisper.ai/pricing): four tiers, metered in credits, with
  a free tier that needs no card. Prices and allowances are stated there rather
  than here so this file cannot go stale against them.
- Hosted: our API, running on AWS in London, with a zero-logging guarantee —
  content you scan is discarded once the verdict is returned.
- On-premises: the same detection in a Docker container inside your own
  environment, so sensitive documents never leave your network.
- Edge: a reduced build for constrained hardware.

## Legal

- [Privacy policy](https://unwhisper.ai/privacy)
- [Terms of service](https://unwhisper.ai/terms)
- [Data processing agreement](https://unwhisper.ai/dpa)

Unwhisper is a service of Cyberrock Ltd — https://cyberrock.ai