Tessarac Platform Beta · Security Platform

Identity, secrets, and access — unified.

Our second product consolidates the security stack most companies stitch together from a dozen vendors — identity, secrets, privileged access, endpoint, cloud posture, and an AI-empowered SOC — into one open, deployable platform that runs from a community lab to a sovereign enclave. It is in beta today.

Not available yet. This page describes the Security Platform we are building; ACOG is the product you can use today.

Request early access Meanwhile, cut your LLM bill

Open-core licensing · Designed to be air-gap deployable · SOC 2 / HIPAA / FedRAMP High roadmap

What it replaces

One platform for what you buy from eight vendors.

Hover or tap a category to see the capability that covers it.

replaces identity provider Identity SSO, MFA, passkeys, SAML and OIDC in both directions, SCIM, social sign-in, and smart-card sign-in planned. The IdP everything builds on. See Identity → replaces endpoint detection Endpoint Security Sentinel: an EDR agent with eBPF telemetry, hardware-bound identity, multi-engine AV, and a graduated host-cordon control plane. See Endpoint Security → replaces secrets vault Secrets Vault, encryption-as-a-service, just-in-time credentials, internal CA, SSH key management, and a Kubernetes Secrets Engine. See Secrets → replaces privileged access Privileged Access Brokered access to servers, databases and Kubernetes with JIT approvals, MFA at every session, and full recording and replay. See Privileged Access → replaces cloud posture Cloud Security Continuous CSPM scanning correlated with live agent telemetry, cross-source lockdown recommendations, one pane per cloud. See Cloud Security → replaces soc tooling AI-Empowered SOC An always-on SOC that triages every alert with full context and escalates real incidents to humans. Every action human-approved. See AI-Empowered SOC → replaces api auth & keys API Gateway One auth and key-management plane for every product you ship: scoped keys, rate limits, IP allowlists, hot rotation, full audit. See API Gateway → replaces compliance evidence Compliance FedRAMP, IL5, CMMC L3, ITAR, CJIS, SOC 2, HIPAA, PCI-DSS. Designed to be auditable, sovereign-deployable, with tamper-evident audit logs. See Compliance →

Identity

What's inside

Eight capabilities. One deployable stack.

Preview each capability below. These pages describe the platform we are building — request early access to help shape what ships.

Identity

SSO, MFA, passkeys, SAML/OIDC in both directions, SCIM, social sign-in, smart-card planned. The IdP everything builds on.

Preview

Secrets

Vault, encryption-as-a-service, just-in-time credentials, internal CA, SSH key management, and a Kubernetes Secrets Engine.

Preview

Privileged Access

Controlled access to servers, databases, and Kubernetes with JIT approvals, MFA at every session, and full recording + replay.

Preview

Endpoint Security

Sentinel — an EDR agent with eBPF telemetry, hardware-bound identity, multi-engine AV, and a graduated host-cordon control plane.

Preview

Cloud Security

Continuous CSPM scanning correlated with live agent telemetry, cross-source lockdown recommendations, one pane per cloud.

Preview

AI-Empowered SOC

An always-on SOC that triages every alert with full context and escalates real incidents to humans. Every action human-approved.

Preview

API Gateway

One auth + key-management plane for every product you ship — scoped keys, rate limits, IP allowlists, hot rotation, full audit.

Preview

Compliance

FedRAMP, IL5, CMMC L3, ITAR, CJIS, SOC 2, HIPAA, PCI-DSS — designed to be auditable, sovereign-deployable, with tamper-evident audit logs.

Preview
Beta

Be first on the security platform.

Join the early-access list to preview builds, influence the roadmap, and deploy the moment it ships.

Request early access Explore the AI Cost Optimizer