How it works
Register. Assess. Bless. Then keep it honest.
Four steps, each leaving a record behind.
How it works
Register. Assess. Bless. Then keep it honest.
- 01
Register
Owners answer a plain-language intake, builders submit a spec, pipelines call the API, and connectors discover the rest. Every agent gets an ID and an owner.
- 02
Assess
Blast-radius graph, findings mapped to OWASP, NIST, ATLAS, ISO 42001 and the EU AI Act, and a FAIR loss estimate, in under two seconds.
- 03
Review and bless
Security reviewers work the checklist, request changes and recommend; an approver blesses, with conditions and an expiring attestation.
- 04
Monitor
Connectors re-read the live configuration on a schedule and diff it against the approved baseline. Drift alerts Slack, Teams, email or your SIEM.
Review, blessing and attestations
A decision you can defend a year later.
Every review leaves a record: who was assigned, what the checklist said, what was discussed, what changed, who decided and why. Approvals are bound to the configuration hash that was reviewed, so when the agent changes, the blessing is visibly out of date.
- Ten-point checklist · Pre-filled from the assessment; each item passes, fails or is marked not applicable with a note.
- Separation of duties · Reviewers verify and recommend; a different person blesses. Enforced per tenant.
- Conditions · Approve now with obligations, due dates and resolution tracking; waive with a reason.
- Lifecycle · Expiry, 30-day warnings, recertification, retirement, reopening on drift, revocation on a new version.
- Score at approval
- 41 · medium
- Configuration hash
- sha256 · 9f3c…e21a
- Valid until
- 2027-10-09
- Open conditions
- 1 of 2
- Approved by
- Head of Security Governance
- Frameworks
- OWASP · NIST · ISO 42001
Exportable as a PDF certificate; verifiable by number through the API; revoked automatically when the configuration changes.
Ship agents your CISO can sign.
Tell us about your organisation and the platforms your agents run on. We provision your workspace and you are reviewing your first agent the same day.
Request access