Sigilant · Control for AI agents

Put AI to work, without losing control.

AI agents are being switched on across your business faster than anyone can count them, and they already raise orders, change records and move money. Sigilant gives every agent its own identity, an owner and your rules, so you can say yes to AI and prove it is under control.

Isometric diagram: requests from AI agents on the left pass through the Sigilant gateway in the centre, where each is allowed, refused or held for a person, and the allowed ones go on to business systems on the right. A scanner at the lower left tests the agents and the gateway again after every change.

Proudly partnered with

SCX.ai logo Sovereign inferenceSCX.ai DekkoSecure

Does this sound familiar?

Three questions you will be asked about your AI.

Today, most businesses cannot answer them, so security says no and AI projects wait. With Sigilant, you can, and you can prove it.

Three AI agents on a register, each with its own identity and a named owner; one is linked to the person it is acting for

The audit

"Show me a list of your AI agents, and who looks after each one."

Today: a spreadsheet, if you are lucky. Some agents use a staff member's login. Nobody is sure what each one can reach.

With Sigilant: every agent has its own ID and a named owner, who checks in regularly to confirm it is still needed. When an agent works for someone, the record names both.

Three AI agents share one key into a business system

When something goes wrong

"What did the AI do, for whom, and who approved it?"

Today: all the agents share one access key, so your systems cannot tell them apart. Nobody can say which one did it, or whether anyone agreed.

With Sigilant: every action is on the record: which agent, for whom, and who said yes. When an agent placed a $48,000 order, it waited for a named manager's approval, and the record shows it.

An AI agent stopped by a barrier in front of a locked business system

Your customer

"How do you control what your AI can access?"

Today: a written policy, but nothing enforces it. The AI holds a long-lived access key that opens far more than its job needs.

With Sigilant: the AI holds no lasting key. For each allowed job it gets a pass that opens only that one thing and soon expires, and you can show your customer the rules and the record.

How it works

Every AI action goes through one checkpoint.

Your AI agents go through Sigilant to reach your systems, instead of going straight in. Nothing has to be rebuilt.

Step 01

Check

Before anything happens, Sigilant checks it against your rules: which agent, for whom, doing what.

Yes, wait or no

Step 02

Approve

Big or risky actions wait for a named person to say yes. They see exactly what they are agreeing to.

A person decides

Step 03

Access

The AI holds no lasting key to your systems. It gets a short-lived pass for one job, then the pass expires.

Nothing to steal

Step 04

Record

Everything is written down, yes or no, on a record that shows if anyone changes it.

Proof, automatically

Step 05

Test

After every change, a testing agent looks again. Anything new it finds comes back to be claimed or switched off.

Nothing slips through

What you get

Eight things you can tell your board.

Each one is something Sigilant does, in words you can repeat.

Every agent has an ID

Its own identity and a named owner.

Always tested

New agents, tools and keys are found after every change, then claimed or switched off.

A person says yes

Big or risky actions wait for approval.

Only what it needs

No more than its job, or its person, allows.

No lasting keys

A short-lived pass for each job, nothing to steal.

A kill switch

Stop any agent at once, even halfway through.

Hijacks prevented

Even if an email or web page hijacks an AI, Sigilant prevents anything your rules don't allow.

Proof anyone can check

A record nobody can quietly change.

One agent cut off at the gateway while another continues
The kill switch
A chain of sealed records anchored to a vault
The record

Modules

One platform. Add what you need.

Start with control over your AI agents. Add finding and testing, and the same control for plant and machinery.

Your business systemsAvailable now

Sigilant

Control for AI agents

  • Every agent has an ID and an owner
  • Big actions wait for a person’s yes
  • Switch any agent off at once
How it works →

BugXHunter

Find your AI, and keep testing

  • Finds the AI agents, tools and keys you did not know you had
  • Tests your systems every day, and after every change
  • Its own testing agents follow Sigilant’s rules too
bugxhunter.com ↗
A scanner on a platform sends pulses out to what it finds: agents with an owner, agents nobody has claimed, a code repository, a server and a key left in the open

How they work together

Find your AI agents. Check each one.

  1. BugXHunter scansyour code and systems for AI agents, AI tools and keys to AI services.
  2. A person decidesin Sigilant: claim each one and set its rules, or switch it off.
  3. The scan runs againafter every change.
Your plant and machineryIn development · design partners wanted

Sigilant OT

Control for plant and machinery

  • No AI agent changes a controller without your rules
  • A named engineer says yes first
  • Safety systems are out of reach, always
Talk to us about OT →

BugXHunter OT

Test the plant without risking it

  • Only listens on live sites
  • Active testing happens in a lab
  • A live check needs two people’s yes
Talk to us about OT →

Deployment

Works with what you already have.

Your people log in the way they already do, with Okta, Auth0 or Microsoft Entra ID. Sigilant runs on your own systems, so your rules and your records stay with you.

  • IdentityWorks with your existing logins
  • AgentsWorks with the AI agents you already use
  • HostingRuns in your environment
  • FailureIf in doubt, it says no
  • CryptographyProtected against future code-breaking
  • EvidenceRecords nobody can quietly change

Bring one AI agent. We will show you.

In one hour, we will show Sigilant controlling it, on your systems, with your rules. You leave with the record.

Get in touch

Request a briefing.

Tell us which AI agents you want to use and what they need to reach. We will reply within one business day.