Show HN: Kairos – Open-source risk and fraud decisioning platform

Posted by ayanb9440 3 days ago

Counter104Comment36OpenOriginal

Hey HN, Ayan here from Finic. We’re launching Kairos, an open source alternative to Sift, Sardine, and other real-time fraud decisioning platforms. Kairos addresses two of the biggest problems facing traditional decisioning tools: a lack of labeled data to train on and dealing with fraudsters that are constantly changing their tactics.

1. Traditional fraud solutions use ML models such as XGBoost to detect fraud, but these models are dependent on quality labeled data which many businesses do not have. We address this by using “System One” decision models in additional to traditional models such as XGBoost and logistic regression. This allows you to incorporate plain language questions such as “Is this a throwaway email” into your decisioning, bypassing the need for large amounts of labeled data. This also allows you to capture aspects of fraud that are more unstructured, which is something that XGBoost models struggle with.

2. Fraud teams are facing off with live players that are constantly changing their behavior to bypass the detection logic they have in place. You can train a detection model or define a ruleset once, but it will become obsolete in a matter of weeks as fraudsters figure out what your detection logic is. This means that you need a team regularly training models and updating rules based on new fraud patterns. Typically this takes a large data science/ML team. Kairos addresses this by introducing an MCP server, so that your agent (Claude Code, Cursor, Codex, etc.) can define a decision workflow, train models on your data, and pick the variant that performs best.

You can self-host Kairos with Docker or use the hosted version at https://kairos.finic.ai

Comments

Comment by factotvm 2 days ago

I love that this is open source, thank you. I'm not a fan of TypeScript on Node for this solution space. For a payment gateway, I'd want a program that can't modify itself from external sources. Programs in this runtime can rewrite themselves while running, and the Dockerfile doesn't lock it down. So as it stands, nothing at the runtime level prevents prototype pollution. And a config defect is the kind of bug that keeps on giving.

Comment by bradknowles 2 days ago

This isn’t really a new problem. Back in 1995, I was the Sr. Internet Mail Administrator at AOL. We were doing everything we could to fight the spammers.

We found that we would work on a new technique over a period of weeks or months, and then they would find a way to work around our technique in a single weekend.

Rinse and repeat.

The only thing that has changed is that the market for scammers has moved, and they’ve gotten a lot better and faster at adapting to your protection techniques.

Comment by citguru 2 days ago

True, but still a big issue today

Comment by edude03 2 days ago

Not something I need but super cool that this is both open source and shows the realtime flow.

Comment by tehsurf 2 days ago

Thanks for showing Keiros! This looks very promising!

Could you explain how "System One" differs from the traditional, rule based, approach? Sticking to your example: How would the question 'Is this a throwaway email?' be translated into Kairos business logic?

When using the MCP Server: How does Claude develop such models, e.g. feature engineering? Is this an MLOps pipeline behind an MCP?

Comment by agileAlligator 2 days ago

System one is just a Jev API Call presumably. Or one of the open source alternatives to Jev. https://typesafe.ai/blog/introducing-system-one-models-and-j...

Comment by citguru 2 days ago

Actually while similar to Jev and uses the popularized architecture by Jev, Kairos uses an underlying model called Grayson trained by Finic but for Fraud. You can check it out - https://finic.ai/

Comment by tehsurf 2 days ago

Thanks!

Comment by tensegrist 2 days ago

Comment by bobbiechen 2 days ago

Referring to "decisioning", which is unfortunately a real term in this space.

Don't get me started on people who use "decision on" to mean "enforce a decision" (i.e. by blocking an action)

Comment by wuemeli 2 days ago

Why would you ask a decision model if an email is disposable? There is so much more behind that than the looks of the email. This just seems like yet another video-coded anti-fraud thingi.

Comment by citguru 2 days ago

Not just that. You could ask any more complex questions. Thats just an easy example

Comment by wuemeli 14 hours ago

yet asking about that with a model is pointless. do you even know what you're talking about??

Comment by hemankgurram 2 days ago

yea its disposable if you want it that wayyy

Comment by garageguideapp 2 days ago

Can you do anything about Debbie in HR clicking links?

Comment by citguru 2 days ago

Debbie, probably needs more email training

Comment by octoberfranklin 2 days ago

Is anybody else annoyed by made-up words like "decisioning" and "proofing"?

You can't slap "ing" on a noun. It's for verbs. Stop nouning.

Comment by marcus_holmes 2 days ago

Language is what people use to communicate, not what's written in the books. It's fluid, and adapts to requirements as the requirements change.

Would it be better if they invented a completely new word, with no clue as to what it means, rather than adapt an existing language structure to their purpose, which everyone understands immediately (even if they get grumpy at it)?

Comment by octoberfranklin 1 day ago

That's the mindset that led to Ebonics.

How'd that work out?

Comment by marcus_holmes 1 day ago

I'd never heard of it before. So I read the Wikipedia page on it.

From that, I think the main problem is defining AAE (or Ebonics which appears to be a synonym) as a different language. AAE is probably more understandable to the average English speaker than the dialect of NE England [0].

So, to answer your question: I think that the term Ebonics didn't really work out, but otherwise it's going OK. There are multiple different dialects of English, of which AAE (Ebonics) is one, and they all use different words, not all of those words are in the dictionary or used in the manner that the OP is talking about, and they are all English.

How do you think it worked out?

[0] https://en.wikipedia.org/wiki/Geordie

Comment by octoberfranklin 20 hours ago

Ebonics is not a "dialect" of English.

https://en.wikipedia.org/wiki/Ebonics_(word)

Comment by mh- 2 days ago

yes, but don't blame OP for it. this is effectively a term of art in their field.

Comment by octoberfranklin 2 days ago

I blame OP for perpetuating it. And for extending it (to HN) outside their field.

Comment by ShalomDembe 1 day ago

[flagged]

Comment by Messier43 3 days ago

There's a meta linux distribution with that name already :(

https://kairos.io/

Comment by jonas21 3 days ago

And an identity verification company: https://kairos.com/

And an AI safety organization: https://kairos-project.org/

And a DARPA program: https://www.darpa.mil/research/programs/knowledge-directed-a...

Pick any ancient greek word and you'll probably find at least a handful of collisions.

Comment by citguru 2 days ago

There will always be projects that share the same name. You can do quick search on Github: https://github.com/search?q=kairos&type=repositories. However it does not change the significance of what each project is building and the problem they sought to solve.

Comment by 3 days ago

Comment by giwook 2 days ago

and...?

Comment by Joel_Mckay 2 days ago

In general, the community tries to avoid/mitigate project naming confusion. It is usually a gentleman's agreement, but sometimes may get nasty with trademarks/copyrights (example: Arduino.)

If you are not associated with a core decision team, it is considered nice to avoid confusing the public. In my opinion, gleaning donations is just theft. =3

Comment by rytill 2 days ago

"The community" of every single person that works on software and names things? For which you can speak?

Comment by Joel_Mckay 2 days ago

In general, traditionally there are underappreciated curators that take on the role of keeping a named package or program consistent, and may go though a personal validation process with a OS build organization to provide a chain of accountability for the user-base.

The amount of abuse these people endure from general users is a classic rerun. =3

Comment by gnabgib 2 days ago

Oh that community! Yeah we banned Joel_Mckay for speaking for us

Comment by Joel_Mckay 2 days ago

I wish I had more time to participate in FOSS these days, as there is a backlog of projects I'd like to get done.

Now mostly focused on rather boring small stuff... like sub-micron boring... Have a wonderful day =3

Comment by marcus_holmes 2 days ago

"we"?

Comment by Joel_Mckay 2 days ago

Are you asking a bad comedian to explain their joke?

My only active FOSS project right now is a unpublished 3D volumetric slicer for a home metal printer that won't be public for another 2 to 3 years for various trade reasons. I code mostly for fun these days, and the dude doesn't sound like fun to work around. =3

Comment by marcus_holmes 1 day ago

I was trying, but obviously failing, to extend the joke by asking who "we" was, as per the old Lone Ranger joke (https://huntthedevil.wordpress.com/2015/05/08/what-do-you-me...)

I have no FOSS projects, I'm not sure I entirely agree with it all, there's an element of "getting developers to create free stuff for corporations". I notice there are no "FOSS" architecture plans, or any other professional output. But I digress. Good for you :)

Comment by Joel_Mckay 1 day ago

It is a personal choice to share commercially non-viable works under Apache 2.0, but I agree FOSS won't normally pay the bills.

One can't do a OSS project expecting other people to give a toss, but rather it solves a niche issue you and 5 other hobbyists encountered. =3

Comment by gokulravi992 2 days ago

[flagged]

Comment by dingody 1 day ago

[dead]

Comment by vladsiu 2 days ago

[dead]

Comment by shopcutout 2 days ago

[dead]