Enterprise
Enterprise deployment options
What exists today for organizations, what is partial, and what is still on the roadmap. Capabilities are labelled by how they are actually delivered.
Deployment options
Local enforcement
The connector evaluates tool calls on the developer machine with the bundled rules, with no account and no network connection required. Optional outbound features can be turned off.
Managed cloud
A hosted dashboard for enrolled agents: device authorization, policy rollout, events, incidents and signed webhook export. Regions and residency are not yet confirmed.
Self-hosted control plane
A single-host Docker baseline with migration, bootstrap and smoke tooling. It needs production TLS, mail, backup, sizing and high-availability work before it is offered for production use.
Capability matrix
| Capability | Managed cloud | Self-hosted | Notes |
|---|---|---|---|
| Single sign-on (SSO) | Roadmap | Partial | Sign-in uses Clerk. Enterprise SSO connections are not configured or accepted for the managed web app. The self-hosted control plane has OIDC and SAML sign-in, optional just-in-time provisioning (per tenant, verified domains only, group-to-role mapping that never grants owner) and support for an internal identity provider with an internal CA. Real Entra or Okta acceptance and audited SAML enforcement remain open. |
| SCIM directory provisioning | Roadmap | Partial | The managed web app has no SCIM endpoint. A SCIM function exists in the self-hosted control plane; provisioning has not been accepted against a real identity provider. |
| SIEM and webhook export of security events | Implemented | Partial | The managed dashboard can send signed webhook exports of deny and critical events, policy-rollout reminders and escalations, with failed deliveries tracked and replayable. The self-hosted control plane forwards centrally to syslog (TLS, TCP or UDP), Splunk HEC, Elastic and Microsoft Sentinel, or a signed webhook, through a queued outbox with dead letters; QRadar and Wazuh are covered by integration guides, not native forwarders. No forwarding path has been accepted against a customer SIEM and delivery receipts are still open. |
| Audit trail and audit export | Partial | Implemented | The managed app records control-plane audit entries with a 90-day retention window and supports CSV export for stale-agent lists. Paged audit export with signed cursors exists in the self-hosted control plane; the operator must schedule its cleanup. |
| Policy distribution and two-person approval | Implemented | Implemented | Policies can be published to agents with rollout tracking, drift alerts and an optional two-person approval step. Enforcement on real hosts still needs acceptance. |
| Role-based access and tenant isolation | Partial | Implemented | Tenant isolation and RBAC exist but an independent penetration test is still open, so isolation has not been independently verified. |
| Self-hosted control plane | Roadmap | Partial | A single-host Docker baseline with migration, bootstrap and smoke tooling exists. Production TLS, mail delivery, backup, sizing and high-availability acceptance are required before it is offered for production. |
| Air-gapped operation | Roadmap | Partial | Local detection runs without a network connection and optional outbound legs can be disabled. A signed offline image bundle and licence-bound offline detection-content packs with an import folder and revocation list exist for the self-hosted control plane. The offline install and update path has not been accepted in a customer environment. |
| Regional placement (EU, US, APAC) | Roadmap | Roadmap | Intended, not proven. No residency commitment is made. |
| Invoice orders and private-registry distribution | Partial | Partial | Orders are intended to be placed by invoice with signed packages delivered through an authenticated private registry. Provider-of-record, publisher key custody and registry publication are still open. |
| Fleet enrollment for mass deployment | Roadmap | Partial | The managed web app enrolls one device per install code. The self-hosted control plane issues reusable fleet enrollment keys with a machine cap, an expiry of at most 365 days, revocation and audit, with recipes for MSI/SCCM, Intune, Group Policy and Ansible. Not yet accepted in a customer fleet. |
| Per-customer signed installers | Partial | Partial | Per-customer MSI, EXE, deb, rpm and tar.gz builds embed a vendor-signed customer packet. Windows Authenticode signing with a non-exportable key (Azure Key Vault, a cloud HSM or a PKCS#11 token) is wired, but no code-signing certificate has been issued yet, so Windows installers are not Authenticode-signed today. No macOS installer is offered. |
| Browser Guard for web AI assistants | Partial | Partial | A Manifest V3 extension for Chrome and Edge 120+ and Firefox 140+ covers the ChatGPT, Claude, Gemini and Copilot web apps and can tell personal from company accounts (warn, block or mask). It is not listed in a browser store, and desktop apps and Safari are not covered. Not yet accepted in a customer environment. |
Implemented: present and reachable, not accepted in a customer environment. Partial: some of it exists and the note lists what remains. Roadmap: not implemented for that option.
Orders and evaluation
Pricing is set by approved order. There is no public price list, and nothing on this site is a quote. Enterprise orders are placed by invoice against a written order form.
Before an order, you can run a 14-day, 1-agent evaluation to look at the product in your own environment. See the evaluation application.
Procurement material available now is listed in the trust center. A signed DPA, an SLA and a penetration-test report are not available yet.