The Product

An employment system for your AI workforce.

Three capabilities, bought as one ladder. Identify what is running, govern what it is allowed to do, and attest to everything it did. Each rung includes the one below it.

Start your $1 trial →Get in touch

Identify

Every agent and non-human identity in the estate, correlated across identity providers, secrets vaults, certificate authorities, clouds and agent frameworks. Each entry carries the basis on which we know it is there, and the confidence that basis earns.

Unlimited discovery on every tier. Finding more should never cost more.

CONFIDENCE, STATED

DefinitiveCAN GATE

StrongCORROBORATE

SuggestiveFLAG ONLY

A registry that hides its own guesswork is worse than no registry.

Govern

One governed credential per agent, issued at provisioning, scoped to what the agent needs, tied to a named human owner. Every action is evaluated against that credential before it happens, including at agent-to-agent handoffs.

Revocation happens at the issuing authority, not inside our control plane.

POLICY OUTCOMES

within scopePERMIT

over thresholdESCALATE

unscoped delegateDENY

credential retiredREVOKE

Attest

Every issuance, evaluation and revocation recorded as an attested record, carrying the lineage of the data the agent touched: what it read, what it derived, what it wrote, what it passed on, and under whose authority.

Detection asks whether behaviour looks anomalous. We record whether it was authorized.

MAPPED AS WRITTEN

SOC 2 Type II

NIST CSF 2.0

ISO 27001:2022

ISO/IEC 42001

The audit package assembles as the work happens.

The claim that survives contact

Killed at the source, across infrastructure we do not operate.

Other control planes govern agents inside their own control plane. Signal Loom revokes each permission and certificate where it was originally issued: at the certificate authority, the identity provider, the vault, the cloud. If a control reaches only the credentials it issued itself, it is not a control over the agent.

What share of one agent's credentials can your current control actually revoke?

REVOCATION · ONE AGENT

Certificate authorityREVOKED

Identity providerREVOKED

Secrets vaultREVOKED

Cloud workload identityREVOKED

External CA · TLS chainREVOKED

ATTESTED · OWNER RECORDED · UNDER A MINUTE

Where each blind spot closes

Three of five close with what we ship today. Two are on the roadmap, and we say so.

Detection has a structural ceiling. Some agent deployment patterns produce no reliable signal by construction, and each one closes at a specific layer. Here is which, and what is available when.

Blind spotWhy no signal existsCloses atStatus

Agent riding a human's sessionIndistinguishable from the human at the identity layer.ISSUED CREDENTIALAVAILABLE

Browser-extension agentsInherit full user context.ISSUED CREDENTIALAVAILABLE

Agents behind a rewriting proxySource identity collapsed at the boundary.IDENTITY PROPAGATIONAVAILABLE

Local-transport protocol serversLocal process, local pipes. No network artifact.HOST OBSERVATIONROADMAP

Fully local model inferenceNo egress, no provider endpoint, no key material.ROOT OF TRUSTROADMAP

Which reframes a feature comparison into a layer comparison. Inference is a measurement capability. Issuance is a control capability.

See it against your own estate.

Sixty days, every feature on, discovery uncapped. One dollar, and the findings are yours either way.

Start your $1 trial →See pricing