Governed AI-ops for managed-endpoint fleets, providing login-storm analysis and patch/config drift detection with built-in audit, budget, and risk-tier governance.
Enables read-only access to CloudSOC DLP incidents, profiles, detection patterns, data identifiers, and index health through governed MCP tools with local audit logging.
Enables observability and governance for local LLMs via Ollama, including auditing model usage, scanning prompts for secrets/PII, and enforcing allow/deny policies.
Enables governed, read-only investigations of on-premises endpoint incidents and events, entities, threat feeds, policy lists, and sandbox results through audited MCP and CLI calls.
Enables read-only visibility into management status, assets, alerts, events, policies, reports, roles, users, and syslog through governed MCP and CLI calls. Credentials stay in environment variables, TLS verification remains on, and each call records a local audit event.