Tessarac

Infrastructure that pays for itself.

AI and security products whose value shows up on your invoice — with the math attached. One built to cut what you spend on models; one built to replace what you buy from a dozen vendors.

Your keys. We never hold your contracts.

  • Anthropic
  • OpenAI
  • Bedrock
  • Vertex

How we work

Show the math. Keep the evidence.

01

Evidence over assertions

If we say something about our own systems — uptime, cost, who touched what — there is a record behind it that can be checked.

02

Your data leaves in the box it arrived in

No proprietary export format, no log you cannot read without us. If we hold something for you, you can take it back out.

03

One codebase, wherever you run it

Hosted, in your own cluster, or fully air-gapped: the same image and the same behaviour. No lesser fork for self-hosted customers.

04

A small team, one standard

We would rather stay small and hold every release to the same bar than grow headcount and let it slip somewhere nobody is watching.

What we build

Capabilities

AI Cost Optimizer Available now

The same answer. A smaller bill.

Every request is graded before it costs anything, then answered by the cheapest model that still clears your accuracy bar. What it saves is measured request by request, against what the same call would have cost untouched — so every saving on your invoice is one you can check line by line.

Per request
Each call priced twice: what it cost, and what it would have cost untouched.
Your keys
Anthropic, OpenAI, Bedrock and Vertex. We never hold your contracts.
25%
Our share of what we actually save you. Nothing in a month we save you nothing.

Five gates, before a cent is spent

  1. 01 Budget
  2. 02 Policy & DLP
  3. 03 Optimise & route
  4. 04 Cache
  5. 05 Meter

Security Platform Beta

Everything they sell you separately. One platform.

Most companies stitch security together from a dozen vendors. Tessarac's second product folds identity, secrets, privileged access, endpoint, cloud posture and an AI-empowered SOC into one open, deployable stack. It is in beta today. Hover a category to see what covers it.

replaces identity provider Identity SSO, MFA, passkeys, SAML and OIDC in both directions, SCIM, social sign-in, and smart-card sign-in planned. The IdP everything builds on. See Identity → replaces endpoint detection Endpoint Security Sentinel: an EDR agent with eBPF telemetry, hardware-bound identity, multi-engine AV, and a graduated host-cordon control plane. See Endpoint Security → replaces secrets vault Secrets Vault, encryption-as-a-service, just-in-time credentials, internal CA, SSH key management, and a Kubernetes Secrets Engine. See Secrets → replaces privileged access Privileged Access Brokered access to servers, databases and Kubernetes with JIT approvals, MFA at every session, and full recording and replay. See Privileged Access → replaces cloud posture Cloud Security Continuous CSPM scanning correlated with live agent telemetry, cross-source lockdown recommendations, one pane per cloud. See Cloud Security → replaces soc tooling AI-Empowered SOC An always-on SOC that triages every alert with full context and escalates real incidents to humans. Every action human-approved. See AI-Empowered SOC → replaces api auth & keys API Gateway One auth and key-management plane for every product you ship: scoped keys, rate limits, IP allowlists, hot rotation, full audit. See API Gateway → replaces compliance evidence Compliance FedRAMP, IL5, CMMC L3, ITAR, CJIS, SOC 2, HIPAA, PCI-DSS. Designed to be auditable, sovereign-deployable, with tamper-evident audit logs. See Compliance →

Identity

Careers

A small team, one standard.

Get started

Pay a share of what we save you. Nothing if we save you nothing.

No seat licences and no minimum. Keep your own provider keys — Tessarac never holds your contracts.