Agents

Monitors authentication, privilege escalation and impossible-travel across all identities. Proposes MFA step-up and token revocation for anomalous sessions.

Last active 6s ago

Backup responder held in suggest-only mode. Activated when Warden is saturated or when a change window requires human approval before containment.

Last active 4h ago

Long-horizon hunter that replays historical telemetry to surface slow, low-and-slow campaigns that single-shot detectors miss.

Last active 9s ago

Guards production AI models against data poisoning, prompt injection and inference drift. Currently in observe-only mode pending review of its input-firewall policy.

Last active 12s ago

Correlates weak signals from every other agent into ranked attack chains. Specializes in attributing autonomous external adversaries that operate at machine speed.

Last active 45s ago

Secondary perimeter watcher focused on inbound reconnaissance and scanning. Runs in observe mode and feeds Pathfinder with probe telemetry.

Last active 2h ago

Primary network-fabric monitor. Baselines east-west and north-south flows across all segments and autonomously proposes and applies block rules when traffic deviates from the learned model.

Last active 24s ago

Containment executor. Isolates hosts, blocks source IPs, and revokes sessions on confirmed threats. Every action is logged with a rollback token.

Last active 0s ago