Sigilant · Control for AI agents

Put AI to work, without losing control.

AI agents are being switched on across your business faster than anyone can count them, and they already raise orders, change records and move money. Sigilant gives every agent its own identity, an owner and your rules, so you can say yes to AI and prove it is under control.

Isometric diagram: requests from AI agents on the left pass through the Sigilant gateway in the centre, where each is allowed, refused or held for a person, and the allowed ones go on to business systems on the right. A scanner at the lower left tests the agents and the gateway again after every change.

Proudly partnered with

SCX.ai logo Sovereign inferenceSCX.ai DekkoSecure

The problem

AI agent sprawl is getting out of hand.

AI agents are multiplying across teams and platforms faster than security can track them. They often run under borrowed or shared accounts, so when your auditor, your board or a customer asks the questions below, nobody can answer.

A scanner sends pulses across what it finds: agents with an owner, agents nobody has claimed, a code repository, a server and a key left in the open

Your auditor asks

"How many AI agents do you have, who owns them, and what can they reach?"

Agents are created faster than anyone can track them. Nobody can say how many exist, or confirm each one is still needed and owned.

Three AI agents share one key into a business system

Your board asks

"What did the AI do, on whose behalf, and who approved it?"

Agents run under shared accounts, so their actions can't be attributed. There is no reliable record of what they did, or why.

An AI agent stopped by a barrier in front of a locked business system

Your customer asks

"How do you control what your AI can access?"

AI is often given broad permissions, such as full access to a mailbox or file store, because it is easier. Any misuse or manipulation then has a wide impact.

How it works

Every AI action goes through one checkpoint.

Your AI agents go through Sigilant to reach your systems, instead of going straight in. Nothing has to be rebuilt.

Step 01

Check

Before anything happens, Sigilant checks it against your rules: which agent, for whom, doing what.

Yes, wait or no

Step 02

Approve

Big or risky actions wait for a named person to say yes. They see exactly what they are agreeing to.

A person decides

Step 03

Access

The AI holds no lasting key to your systems. It gets a short-lived pass for one job, then the pass expires.

Nothing to steal

Step 04

Record

Everything is written down, yes or no, on a record that shows if anyone changes it.

Proof, automatically

Step 05

Test

After every change, a testing agent looks again. Anything new it finds comes back to be claimed or switched off.

Nothing slips through

What you get

Eight things you can tell your board.

Each one is something Sigilant does, in words you can repeat.

Every agent has an ID

Its own identity and a named owner.

Always tested

New agents, tools and keys are found after every change, then claimed or switched off.

A person says yes

Big or risky actions wait for approval.

Only what it needs

No more than its job, or its person, allows.

No lasting keys

A short-lived pass for each job, nothing to steal.

A kill switch

Stop any agent at once, even halfway through.

Hijacks prevented

Even if an email or web page hijacks an AI, Sigilant prevents anything your rules don't allow.

Proof anyone can check

A record nobody can quietly change.

One agent cut off at the gateway while another continues
The kill switch
A chain of sealed records anchored to a vault
The record

Modules

One platform. Add what you need.

Every plan finds your AI agents and puts them under control. Add continuous security testing when you need it.

Your business systemsAvailable now

Sigilant

Find and control your AI agents

  • Finds the AI agents, tools and keys you did not know you had
  • Every agent has an ID and an owner
  • Big actions wait for a person’s yes
  • Switch any agent off at once
How it works →

BugXHunter

Keep testing your systems

  • Tests your systems for weaknesses, every day and after every change
  • Finds weaknesses faster than once-a-year testing can
  • Its own testing agents follow Sigilant’s rules too
bugxhunter.com ↗
A testing agent at the lower right sends its probes through the Sigilant gateway: on a gateway tile some are marked clean and go on to the business systems, others turn up a vulnerability or a misconfiguration; four systems are marked in red with what it found

How they work together

Tested through the same checkpoint.

  1. BugXHunter testsyour systems for weaknesses, every day and after every change.
  2. Through Sigilantits testing agents work under the same rules as every other agent.
  3. A person decideswhat to fix first, from what it finds.
Coming next Sigilant OT and BugXHunter OT: the same control and testing for plant and machinery. See the roadmap →

Deployment

Works with what you already have.

Your people log in the way they already do, with Okta, Auth0 or Microsoft Entra ID. Sigilant runs on your own systems, so your rules and your records stay with you.

  • IdentityWorks with your existing logins
  • AgentsWorks with the AI agents you already use
  • HostingRuns in your environment
  • FailureIf in doubt, it says no
  • CryptographyProtected against future code-breaking
  • EvidenceRecords nobody can quietly change

Bring one AI agent. We will show you.

In one hour, we will show Sigilant controlling it, on your systems, with your rules. You leave with the record.

Get in touch

Request a briefing.

Tell us which AI agents you want to use and what they need to reach. We will reply within one business day.