One policy engine. One audit trail. From network to endpoint.
DAXA decides what every agent may see and do with your data, and enforces it inside your infrastructure.
Five components. One platform.
Safe Infer
Classifies and enforces on every prompt and response.
Safe MCP
Classifies and enforces on every tool call and result.
Policy Engine
Your topics, entities and rules, written with AI help.
Guardian Agent
Watches behavior across agents. Flags, blocks or takes them offline.
DAXA Plugin
File isolation, network policy and seccomp on the endpoint.
Reasoning-Based Access and Action Control
Access control was built for people opening files. Agents read, decide and act in one run, so the question changes.
Who is asking?
Do the attributes match?
Should this agent do this, with this data, right now?
-
REQUESTRead
alpha_model.py -
1 · IDENTITYContractor has repo access
-
2 · POLICYQuant IP is restricted for contractors
-
3 · ADJUDICATIONGuardian Agent sees the trading algorithm
-
DECISIONFile returned, algorithm redacted. Work continues.
Decisions are enforced by the Gateway and the Plugin. Control the input context, not just the output.
Single requests look fine. The pattern gives it away.
Knows normal for each agent
The ADAK graph records the data each agent touches and the workflow it follows.
Scores live behavior
Skipped steps, data spikes, new endpoints and drifting MCP servers get flagged or blocked.
Sharper with scale
It sees network and endpoint, and learns from every agent it governs. New agents are scored on day one.
- Read patient record
- Redact PHI, submit request
- Read payer response
- Send to unknown endpointBLOCKED
- Read applicant profile
- Sanctions screeningSKIPPED
- Apply approval policy
- Approve clientFLAGGED
Inline, at agent speed
Security that slows agents down gets routed around. DAXA is built to sit in the path.
Decision cache
Repeated patterns resolve instantly.
Fast checks first
Light checks clear most traffic.
Purpose-built small models
One per detection task. Only a small share goes this deep.
Audit off the hot path
Logging and metrics run outside the response path.
Scales out: add capacity at the gateway or classifier tier independently.
Runs where your data lives
Inside your VPC
No traffic leaves your perimeter.
On-prem and air-gapped
For sovereign and regulated environments.
HPE AI Factory
Built into AI Factory and Private Cloud AI.
- Scale-out data plane
- highly available control plane
- SIEM/SOAR integration
- Claude Code
- Codex
- Cursor
- LangGraph
- NVIDIA OpenShell
- Claude
- GPT
- Gemini
- self-hosted
- MCP servers
- enterprise APIs
- SIEM
- SOAR