Tessarac
Infrastructure that pays for itself.
AI and security products whose value shows up on your invoice — with the math attached. One built to cut what you spend on models; one built to replace what you buy from a dozen vendors.
Your keys. We never hold your contracts.
- Anthropic
- OpenAI
- Bedrock
- Vertex
How we work
Show the math. Keep the evidence.
Evidence over assertions
If we say something about our own systems — uptime, cost, who touched what — there is a record behind it that can be checked.
Your data leaves in the box it arrived in
No proprietary export format, no log you cannot read without us. If we hold something for you, you can take it back out.
One codebase, wherever you run it
Hosted, in your own cluster, or fully air-gapped: the same image and the same behaviour. No lesser fork for self-hosted customers.
A small team, one standard
We would rather stay small and hold every release to the same bar than grow headcount and let it slip somewhere nobody is watching.
What we build
Capabilities
- Available now AI Cost Optimizer Cut LLM spend on every call. Billed only on proven savings. Explore →
- Available now Data Loss Prevention Policy and DLP before a prompt leaves for a model provider. Explore →
- Beta Security Platform Identity, secrets, access, endpoint, cloud, SOC — unified. Explore →
- Beta Identity SSO, MFA, passkeys, SAML and OIDC in both directions, SCIM, social sign-in, and smart-card sign-in planned. The IdP everything builds on. Explore →
- Beta Endpoint Security Sentinel: an EDR agent with eBPF telemetry, hardware-bound identity, multi-engine AV, and a graduated host-cordon control plane. Explore →
- Beta Secrets Vault, encryption-as-a-service, just-in-time credentials, internal CA, SSH key management, and a Kubernetes Secrets Engine. Explore →
- Beta Privileged Access Brokered access to servers, databases and Kubernetes with JIT approvals, MFA at every session, and full recording and replay. Explore →
- Beta Cloud Security Continuous CSPM scanning correlated with live agent telemetry, cross-source lockdown recommendations, one pane per cloud. Explore →
- Beta AI-Empowered SOC An always-on SOC that triages every alert with full context and escalates real incidents to humans. Every action human-approved. Explore →
- Beta API Gateway One auth and key-management plane for every product you ship: scoped keys, rate limits, IP allowlists, hot rotation, full audit. Explore →
- Beta Compliance FedRAMP, IL5, CMMC L3, ITAR, CJIS, SOC 2, HIPAA, PCI-DSS. Designed to be auditable, sovereign-deployable, with tamper-evident audit logs. Explore →
AI Cost Optimizer Available now
The same answer. A smaller bill.
Every request is graded before it costs anything, then answered by the cheapest model that still clears your accuracy bar. What it saves is measured request by request, against what the same call would have cost untouched — so every saving on your invoice is one you can check line by line.
Five gates, before a cent is spent
- 01 Budget
- 02 Policy & DLP
- 03 Optimise & route
- 04 Cache
- 05 Meter
Security Platform Beta
Everything they sell you separately. One platform.
Most companies stitch security together from a dozen vendors. Tessarac's second product folds identity, secrets, privileged access, endpoint, cloud posture and an AI-empowered SOC into one open, deployable stack. It is in beta today. Hover a category to see what covers it.
Identity
Industries Beta · Security Platform
Built for the industries that can't afford a breach.
- Critical Infrastructure The Tessarac Security Platform, in beta, for energy, water, transport and telecom: designed for air-gapped install and hardware-bound agent identity.
- Federal & Defense The Tessarac Security Platform, in beta, for federal agencies and the defense base: smart-card sign-in, on-prem deployment. FedRAMP is on the roadmap.
- Financial Services The Tessarac Security Platform, in beta, for banks, payments and fintechs: brokered access and audit trails built for PCI-DSS v4 and NYDFS Part 500.
- Healthcare The Tessarac Security Platform, in beta, for hospitals, EHR vendors, payers and digital health: breach-notification workflows and per-patient audit trails.
- SaaS Tessarac for B2B and B2C SaaS — customer identity (CIAM), multi-tenant B2B, branded hosted UI, and an API-key plane for the products you ship. One bill.
Get started
Pay a share of what we save you. Nothing if we save you nothing.
No seat licences and no minimum. Keep your own provider keys — Tessarac never holds your contracts.