Where the products connect.
Appdirs builds a self-hosted security platform: exposure management, identity and access governance, device management, governed agentic AI and the infrastructure under them. Each product deploys on its own — air-gapped in your infrastructure, or as SaaS. Every line drawn here is a connection the code makes, labelled with what passes along it.
In sovereign mode, every external model and tool call Prospica could make is disabled in code, not policy.
Kestryn has run in defence and corporate estates since 2023.
your perimeter
Follow one line.
Who may act.
Kestryn, MDM and Appdirs CMS sign in through Appdirs AuthX — SSO via AuthX, enabled by configuration. ORCA authenticates the services that send to it against AuthX. Nothing else on the page shares an identity model.
The stage lights the sign-in lines from Kestryn, MDM and Appdirs CMS to AuthX, and the line from AuthX to ORCA.
What is sent.
Device management wakes its devices through ORCA. Kestryn and Prospica send their audit and server logs to it, where alert storms fold into one incident and every dispatch is on the record. Integrated with Prospica, ORCA’s incidents can be worked as incident response.
The stage lights the lines from MDM, Kestryn and Prospica to ORCA.
What reasons over it.
Prospica reasons over what Kestryn recorded, cites what it used and keeps its own reasoning on the record. It has no tools of its own: every consequential action waits for a person. In our deployments, Prospica’s language model is Maruti AI. Vulnerability triage is one of its use cases; finance, HR, mail, vendor management and project planning run on the same governed core.
The stage lights the line from Kestryn to Prospica and the line from Maruti AI to Prospica.
What stands alone.
Where nothing is drawn, nothing is evidenced. Discovery, port scanning, service and version detection and OS family in Kestryn come from Vestryn, written in-house — an engine inside Kestryn, not a product sold on its own. Orion HCI runs VMs and containers with integrated storage on bare metal, and connects to nothing on this page.
The stage lights no line. Orion HCI, and the Vestryn engine inside Kestryn, are the only nodes at full strength.
On the record.
Each connection, and the page that describes it.
| From | To | What passes | Described on |
|---|---|---|---|
| Kestryn | Appdirs AuthX | SSO via AuthX, enabled by configuration. | Described on Appdirs AuthX |
| MDM | Appdirs AuthX | SSO via AuthX, enabled by configuration. | Described on Appdirs AuthX |
| Appdirs CMS | Appdirs AuthX | The Appdirs CMS admin is AuthX-integrated. | Described on Appdirs CMS |
| Appdirs AuthX | ORCA | ORCA authenticates the services that send to it against AuthX. | Described on ORCA |
| MDM | ORCA | Device management wakes its devices through ORCA. | Described on ORCA |
| Kestryn | ORCA | Kestryn sends its audit and server logs to ORCA. | Described on ORCA |
| Prospica | ORCA | Prospica sends its audit and server logs to ORCA. Integrated with Prospica, ORCA's incidents can be worked as incident response. | Described on ORCA |
| Kestryn | Prospica | Prospica reasons over what Kestryn recorded, cites what it used, and keeps the reasoning itself on the record. | Described on Kestryn |
| Maruti AI | Prospica | In our deployments, Prospica's language model is Maruti AI. | Described on Maruti AI |
The products.
Each one deploys on its own — air-gapped in your infrastructure, or as SaaS. Start with the one you need.
Security
- KestrynExposure Management
- Kestryn is the exposure-management platform that doesn't stop at a list of findings — it finds, explains, prioritizes, and drives the fix, every step grounded in evidence and an auditable trail.
- engine Vestryn
- Vestryn — the engine inside Kestryn. Every host leaves a trace.
- MDMMobile Device Management
- Unified endpoint management for mobile devices, with zero-touch deployment and kiosk-mode lockdown.
- Appdirs AuthXIdentity & Access Governance
- Appdirs AuthX is the identity and access platform whose engine is ours: one identity store, one role model and one audit trail across applications, servers, network devices and machine identity.
AI & Intelligence
- ProspicaGoverned Agentic AI
- Prospica is the governed AI platform: the model proposes and the core decides, every consequential action passing a governance gate before it happens — deployable air-gapped, and in sovereign mode every external call is disabled in code.
- Maruti AIOur Own Language Model
- Appdirs' own language model, trained in-house and run on your own hardware; the model behind Prospica in our deployments.
Infrastructure
Data & Content
- Appdirs CMSHeadless Content Management
- Manage blogs, contacts, and job postings with AuthX-integrated admin, rich text editing, and SEO-first workflows.
Integrations with SIEM, JIRA and CI/CD pipelines are in use with defence and corporate customers.
Start with the one you need.
We will walk through the products that fit your estate, and set up a scoped evaluation in your own environment if you want one.