Product
1 min read
Apollo x Tailscale: Introducing “Watcher” for AI Oversight & Control
Table of Contents
Evaluating anti-scheming training
While AI agents are now powerful enough to do real work, they are too insecure and unreliable to run unsupervised at scale. In production, we see coding agents strategically lying to their users, introducing security vulnerabilities, writing sloppy code, deleting data, or taking initiative far beyond their instructions.
As organizations move from running one experimental agent to a fleet of hundreds, human attention becomes the bottleneck. You cannot manually review every line of code or every API call an agent makes, and this will only get exponentially worse over time. You are forced to make a trade-off between productivity and safety.
Introducing Watcher
We are building Watcher to resolve this trade-off. Apollo Watcher is an oversight layer for AI agents. It detects real-world safety and security failures before they become liabilities, and flags those failures to you.
It automatically analyzes agent behavior to detect more than twenty distinct failure modes, including instruction violations, deception and dangerous code execution. It is designed for privacy and flexibility: you can run the monitoring backend locally, on-prem, or in the cloud, ensuring sensitive agent logs never leave your control.
If you want to get early access to Watcher, please reach out.
The Apollo x Tailscale Partnership

Today, we are also announcing a strategic partnership with Tailscale to integrate Watcher into their secure LLM gateway, Aperture.
Effective oversight requires two things: access to the data and the ability to understand it.
- Tailscale’s Aperture provides a secure gateway that collects organization-wide agent logs in real-time, handling identity and access without the headache of managing individual API keys.
- Apollo’s Watcher sits on top of Aperture, automatically analyzing every interaction to flag risks before they become incidents.
Key Capabilities
Watcher enables two core workflows for securing your agents.
1. "Analyze" Mode: Organizational Forensics Uncover issues and analyze trends across your entire fleet of agents. Drill down into historical logs to identify recurring failure patterns, audit security risks, or debug why a specific agent went off the rails. Watcher can integrate all deployments across your organization in real-time allowing security experts to see everything in one view.

2. "Live" Mode: Real-Time Oversight Give individual developers a ‘flight control view’ of their active agent sessions. This enables a single engineer to maintain oversight & control over multiple parallel agents confidently, intervening when Watcher flags unexpected behavior. It can also report the issues straight back to your agent, enabling self-correction.

The Future: From Monitoring to Active Interventions
We are building toward a world where monitors don't just watch–they take actions according to fine-grained guardrail policies.
- Active Control: Intercepting and blocking harmful actions before they execute.
- Self-Learning Systems: Monitors that, on top of allowing fine-grained customization, can automatically learn your organization’s specific risk profile and preferences.
- Proactive Discovery: Detecting "unknown unknowns" by continuously scanning against a library of thousands of failure modes.
Become a Partner
We are looking for development partners who want to move from unsecured agents to robust, monitored deployments. Please reach out if you’re interested!
Share this article
oUR FINDINGS
More papers
July 23, 2026
What makes a good monitoring prompt?
We want to understand which principles work well for high-quality monitoring prompts. We use a 1-10 severity scale and full-trajectory scoring, as opposed to real-time binary prompts.
Product
July 13, 2026
Red-teaming auto mode: lessons from our first external monitor campaign with Anthropic
Apollo Research ran a pilot monitor campaign for auto mode, Anthropic's monitoring system for Claude Code agents that decides whether an agent's next action should be allowed or blocked.
Research
July 7, 2026
Evaluating LLM Calibration for Coding-Agent Monitoring
We evaluate 16 LLMs scoring coding-agent trajectories on a 1-10 severity scale across three datasets and five failure modes to assess their capabilities and calibration as coding agent monitors.
Research
January 20, 2026
Apollo’s product vision
We’re building tools that make it easier to secure frontier AI agents.
Product