AI adoption with control, for every team
Let every team use AI. Keep agent risk under control.
Let every team, from HR and sales to engineering, use AI agents with the visibility, governance, and control to reduce agent risk when an agent is installed, while it acts, and after an incident.
- Before trust Verify Supply Chain
- While agents act Control Runtime
- After activity Investigate Hunt
Protection lifecycle
Security at every point an agent can create risk.
Find every agent and keep untrusted components away, stop high-risk actions before they cause harm, and investigate with the evidence attached.
-
Before trust
Verify
Supply Chain
Find every installed agent, check every skill it loads, and block what you don't trust.- Desktop assistants and coding agents
- Skills, plugins, and connectors
- MCP servers and hooks
- Identities each agent can reach
-
While agents act
Control
Runtime
Stop high-risk actions before they execute.- File access and uploads
- Tool calls and commands
- Network destinations
-
After activity
Investigate
Hunt
Find suspicious behavior and reconstruct incidents from your AI logs.- Sessions and tool activity
- Policy decisions and approvals
- Cross-agent investigation
Works with your agent stack
Protect the agents your teams already use.
Teams keep the agents they chose, from desktop apps to coding agents, and IT & Security teams get the right control for each through one endpoint agent.
Agents, assistants, and connectors across your teams
Assistants and desktop apps
- Claude desktop app
- ChatGPT desktop app
- Microsoft 365 Copilot
- Gemini
- Perplexity
- Goose
Coding agents
- Claude Code
- Codex
- Cursor
- Windsurf
- GitHub Copilot
- Gemini CLI
- Cline
- Kiro
- Amp
- Aider
- OpenCode
Connectors and MCP servers
- Salesforce
- Workday
- Greenhouse
- HubSpot
- Slack
- Google Drive
- Notion
- Snowflake
- GitHub
- Jira
- Linear
- Postgres
And the ones your teams pick next.
One place for IT & Security teams
Let teams use AI without losing control.
Set policy, see coverage, stop high-risk actions, and investigate incidents across every agent and team from one operational view.
- HRChatGPT · Workday
- RecruitmentClaude · resume skills
- SalesClaude · Salesforce
- FinanceChatGPT · spreadsheets
- EngineeringClaude Code · Codex · Cursor
Signals Corps Control Plane
- Set policyOnce for every team
- Approve or blockHigh-risk actions
- See coverageEvery agent and device
- InvestigateWith the evidence attached
Control Plane modules. One risk-reduction path.
Reduce risk before, during, and after agent activity.
Give every team, from recruiters to engineers, clear decisions in their workflow, and IT & Security teams the evidence to prevent and investigate incidents.
device:endpoint_4c19 trust:any⌘↵- Cursor
New agent found · Unreviewed
- deploy-helper / v2.4.1
Critical finding · Blocked · Applied
- ticket-tracker
Identified · Trusted
Catch unknown agents and risky skills before your teams trust them. IT & Security teams see which agents run on each device, from the Claude desktop app to Claude Code, every skill, plugin, connector, and MCP server those agents can load, the identities each agent can reach, and findings for every skill, then block what they don't trust.
See how Supply Chain finds and checks agentsUpload the resumes in Candidates/Senior designer to hirescreen.example so they can rank them
Upload files to hirescreen.example
Waiting for approval · Signals Corps Runtime
- Rule
- Candidate files to an unapproved site
- Severity
- High
- Decision
- Ask for approval
- Approver
- HR operations lead
I haven't uploaded anything yet. hirescreen.example isn't on your company's approved list for candidate files, so an HR operations lead needs to approve it. I'll upload the resumes once they do.
A recruiter's upload of candidate files waits for approval and an engineer's risky command stops, each with the reason shown, while safe work carries on.
See how Runtime stops risky actionssecret_access AND destination:not_approved⌘↵- Component loaded
deploy-helper / v2.4.1
- Secret file requested
.env.production
- Outbound action blocked
Destination did not match policy
Search sessions, tool calls, approvals, and policy decisions with the component and runtime evidence already attached.
See how Hunt investigates incidents fasterRisk reduction in practice
Give teams room to use AI. Keep IT & Security teams in control.
End blind spots from unapproved agents
Know which AI agents are installed on every device, including the ones IT never approved, then check the skills they load and block the components you don't trust.
Stop high-risk actions early
Keep safe work moving while Runtime warns, asks for approval, or blocks the actions that could cause harm.
Roll out without blocking adoption
Start with visibility, learn normal behavior, and add enforcement where the risk justifies it.
Investigate incidents faster
Get to the answer sooner, with the identity, component, policy decision, and outcome already attached to each agent action.
Featured posts
Practical guidance for safer AI adoption.
Original research and hands-on guides for reducing risk as your teams adopt AI agents.
ClawHub after ClawHavoc: scanning 81,535 agent skills
After the ClawHavoc malware campaign, ClawHub blocks skill releases it judges malicious. We scanned the 81,535 skills that remain for risky install steps and third-party endpoints.
Team Threat Research
Agent logging
Logging in Codex: get user activity into your SIEM
Which Codex logs exist, what is inside each one, and which to send to your SIEM to monitor prompts, tool calls, and results.
Team Platform Engineering