Capability areas

Discover every AI tool, account, model and agent in use, and keep posture continuously assessed.

• SPM-001 Classify previously unseen AI applications on first encounter
• SPM-002 Detect AI use at the browser point of use
• SPM-003 Detect endpoint AI activity beyond the browser
• SPM-004 Detect direct model-provider API calls from employee devices
• SPM-005 Discover local model runtimes and offline AI installations

Inspect prompts, files and responses in real time; coach, redact or block before data leaves.

• GRD-001 Inspect prompt content in real time before submission
• GRD-002 Inspect file uploads before submission
• GRD-003 Classify sensitive information semantically in ordinary business language
• GRD-004 Detect and coach in the languages your workforce uses
• GRD-005 Detect general, customer, employee and bulk PII

Detect risky AI behavior, investigate incidents and respond with full context.

• GRD-016 Explain each decision to the employee and the analyst
• IDR-001 Generate actionable alerts
• IDR-002 Detect direct and indirect prompt injection attempts.
• IDR-003 Identify use cases leading to elevated risk behavior.
• IDR-004 Integrate with SIEM, SOAR, ticketing, and identity systems

Govern agents, MCP servers and tool calls with identity, scope and runtime control.

• AGT-001 Govern tool calls at read, write and delete scope
• AGT-002 Flag destructive, over-scoped or anomalous agent actions
• AGT-003 Inspect sensitive data retrieved through connectors mid-workflow
• AGT-004 Attribute every connector and tool call alert to a person
• AGT-005 Provide targeted containment for a single connector or tool.

Measure adoption, spend and business value so AI investment decisions are evidence-led.

• SPM-008 Distinguish personal, free and guest accounts from sanctioned enterprise tenants
• IDR-003 Identify use cases leading to elevated risk behavior.
• VAL-001 Measure AI usage and adoption by tool, team, function and workflow
• VAL-002 Classify AI activity into business-relevant use cases
• VAL-003 Measure spend, waste and portfolio decisions

Produce tamper-evident logs and auditor-ready evidence across every control.

• SPM-011 Support the AI tool approval and review lifecycle
• GRD-018 Turn acceptable-use policy into enforceable scenarios
• AGT-004 Attribute every connector and tool call alert to a person
• AUD-001 Keep a configurable record of each conversation
• AUD-002 Export audit and forensic evidence

Deployment, data residency, privacy-by-design and vendor assurance.

• AUD-003 Restrict and audit access to raw prompt content
• PLT-001 Minimize endpoint and network architecture risk
• PLT-002 Disclose where decisions are enforced and how the control fails
• PLT-003 Deploy silently through endpoint management with release controls
• PLT-004 Support Linux endpoints