Tenant isolation, fail-closed policy, and production-safe defaults.
Admin-provisioned access, dual approval for destructive actions, hash-chained audit, and structural blocks on unauthorized active scans — built into the control plane, not bolted on.
Controls that apply across every module.
Admin-provisioned users only — no public signup
BYOK — credentials encrypted, tenant-scoped
Signed Vantage reports with a public verify endpoint
Cross-tenant isolation tested in CI
Ingest mTLS + allowlists for Sentinel
Dual approval for all destructive response actions
Hash-chained, tamper-evident audit log
Fail-closed Policy Engine (503 when unavailable)
Scan Safety Gate and Policy Engine.
Automation is allowed — recklessness is not.
- Structural block on unauthorized and production-critical active scans
- Passive classification only until dual owner/admin approval
- Destructive Reflex actions require distinct approvers
- Policy Engine fails closed (503) when unavailable — never fail-open
- Copilot suggests; humans decide — no AI bypass of policy
- Hash-chained, tamper-evident audit log across every module
Admin-provisioned access · tenant-scoped credentials
Deploy where your data has to live.
SaaS
Axix-hosted, multi-tenant — mid-market, fast rollout
Private cloud
Dedicated VPC / single-tenant — regulated enterprises
On-premises
Docker / Helm on customer infra — data residency
Air-gap
Offline, local LLM, no outbound — defense / critical infra
See Axix Oryx on your own environment.
A guided walkthrough scoped to your SOC, compliance, and production footprint — not a slide deck.