ENGINE
Discovery, port scanning, service and version detection and OS family in Kestryn come from Vestryn, written in-house.
Vestryn
On-premise security platform
Security and governed AI that run inside your perimeter.
Kestryn finds what is exposed on your estate. AuthX governs who can reach it. Prospica proposes; its core decides. Each deploys air-gapped in your own infrastructure, or as SaaS.
In sovereign mode, every external model and tool call Prospica could make is disabled in code, not policy.
Kestryn has run in defence and corporate estates since 2023.
your perimeter
- Kestrynrunning · on hosts you provide
- MDMself-hosted · or multi-tenant cloud
- Appdirs AuthXrunning · nothing phoning home
- Prospicarunning · sovereign mode
- Maruti AIserving · from your hardware
- ORCArunning · no route to the internet
- Orion HCIrunning · on bare metal
- Appdirs CMSair-gapped in your infra · or SaaS
On your hardware, air-gapped if you need it. Deploy one, or several.
Prospica — governed agentic AI
The language model has no tools. Every consequential action passes a governance gate, and is written down before it happens. In our deployments, Prospica's language model is Maruti AI.
The model has no tools.
It drafts, plans, reconciles and follows up — but it cannot send, write to the database, call an API or run a shell. Every consequential action passes a governance gate sized to the risk, and waits for a person where the risk says it should.
A language model outside the core with no tool socket, and four capabilities inside the core that each wait for a governance gate.
Written down before it happens.
Every consequential action is recorded first and taken second, into an append-only ledger that is hash-chained end to end. Each row carries who approved it, from what device, and when — and a refusal is a row too.
A ledger row is written, carrying the approver, their device and the hash of the row before it.
In sovereign mode, cut the uplink and it keeps working.
In sovereign mode every external model and tool call is disabled in code, not policy — a check in the call path rather than a promise in a document. What is local stays exactly as it was.
In sovereign mode the two capabilities that reach outside the network are disabled, while the local ones and the ledger are unchanged.
One governed core. An agent for every desk.
Each one runs on the same core: the model proposes, a gate decides, and the record is written first.
prospica / agentic-soc
Agentic SOC
Vulnerability triage with deterministic scoring, through governed tools.
prospica / agentic-finance
Agentic finance
Ledger, P&L, cashflow and tax. The model never does the arithmetic.
prospica / agentic-hr
Agentic HR
Decision support, not decision-making. No automated action on people.
prospica / mail
Mail
Triage and drafting, with an injection lock and verified citations.
prospica / vendor-management
Vendor management
Vendors, KYC documents, purchase orders and invoices, run as governed workflows.
prospica / project-planning
Project planning
Critical path, PERT and earned value, computed rather than guessed.
- Your tools
- Integrations with SIEM, JIRA and CI/CD pipelines are in use with defence and corporate customers. How the products connect
The products.
Appdirs builds an on-premise security platform: exposure management, identity and access governance, device management, governed agentic AI and the infrastructure under them. Each product deploys on its own — air-gapped in your infrastructure, or as SaaS. Start with the one you need.
Security
- KestrynExposure Management
- Kestryn is the exposure-management platform that doesn't stop at a list of findings — it finds, explains, prioritizes, and drives the fix, every step grounded in evidence and an auditable trail.
- engine Vestryn
- Every host leaves a trace. Kestryn’s discovery engine, written in-house.
- MDMMobile Device Management
- Unified endpoint management for mobile devices, with zero-touch deployment and kiosk-mode lockdown.
- Appdirs AuthXnewIdentity & Access Governance
- Appdirs AuthX is the identity and access platform whose engine is ours: one identity store, one role model and one audit trail across applications, servers, network devices and machine identity.
The stage shows three drawn plates: Kestryn's measured map with a path drawn in red over measured hops and one dashed inferred link, an MDM device locked to kiosk mode, and AuthX's four identity planes lighting one by one under one identity row.
AI & Intelligence
- ProspicaGoverned Agentic AI
- Prospica is the governed AI platform: the model proposes and the core decides, every consequential action passing a governance gate before it happens — deployable air-gapped, and in sovereign mode every external call is disabled in code.
- Maruti AIOur Own Language Model
- Appdirs' own language model, trained in-house and run on your own hardware; the model behind Prospica in our deployments.
The stage shows two drawn plates: Prospica's model proposing with no tools while a governance gate turns on and the core's decision is recorded, and Maruti AI streaming a short code reply token by token.
Infrastructure
The stage shows two drawn plates: one held line from an ORCA node to a field device with a pulse travelling down it, and three Orion HCI bare-metal nodes running VMs and containers over integrated storage.
Data & Content
- Appdirs CMSnewHeadless Content Management
- Manage blogs, contacts, and job postings with AuthX-integrated admin, rich text editing, and SEO-first workflows.
The stage shows one drawn plate: an Appdirs CMS blog post record filling in to published, tagged air-gapped in your infra, or SaaS.
See it inside your perimeter.
We will walk through the products that fit your estate, and set up a scoped evaluation in your own environment if you want one.