The whole platform
Everything you need to govern, secure and observe your agentic estate — agents, MCP servers and LLM gateways — from one control plane, on your own infrastructure.
01Control plane
One portal for your entire agentic estate
Single pane of glass
Govern agents, MCP servers, LLM gateways and channels from one portal.
Configure once, agents auto-update
Change a subscription, credential, route or freeze centrally — agents pick it up automatically, no redeploys.
Closed by default
Agents can’t self-discover or self-connect; every link is an explicit grant.
Live agent network map
Interactive topology of every agent, MCP, gateway, channel and user, health-sorted.
Central subscription management
Wire up agent↔agent, agent↔MCP, agent↔gateway and channel↔agent relationships in the UI.
Test policies on the edge
Click any connection in the map to test the policy between source and destination.
02Agents
Full lifecycle & orchestration
Agent registration
Relay card URL, health checks, visibility and auth method.
Health & status at a glance
Healthy / unreachable / unhealthy, plus active / inactive / frozen states.
Killswitch
Instantly pause a single agent’s traffic with a reason.
Tenant-wide lockdown
Freeze all relay traffic — every agent, caller and webhook — during an incident.
Zero-downtime credential rotation
Regenerate OAuth secrets and keys without changing the client ID.
Skills inventory
See every capability an agent advertises — and govern it.
Agent task board
Live kanban of agent tasks by lifecycle state, with full event history.
Per-agent metrics
Uptime, request volume, latency, error rate and activity charts.
Lifecycle audit log
A chronological trail of every state change per agent.
Agent marketplace
Discover and one-click-connect verified agents.
03Connectivity
MCP servers, gateways & integrations
MCP server management
Register, version, freeze/unfreeze, rotate credentials, full lifecycle log.
Flexible MCP auth
None, bearer, API key, query param or OAuth2 — including user-delegated auth-code flow.
Two-tier MCP marketplace
A curated official catalog plus a community marketplace, with uptime and latency metrics.
One-click connect snippets
Copy-paste config for Claude Code, Claude Desktop, Cursor and more.
LLM gateways with failover
Aggregate multiple providers behind one gateway.
Smart LLM routing
Route by default/fallback or by agent metadata tag, priority-ordered.
LLM provider management
OpenAI, Anthropic, Mistral and more, with credential rotation.
Integration channels
OAuth-backed hubs connecting external systems to your agents.
Microsoft Teams
Enable the Teams bot, download the app manifest, auto-linked channel.
04The gatekeeper
Policy & enforcement on every exchange
Visual policy builder
Drag-and-drop enforcement rules — no code required.
Rego Policy Builder
Switch to code; parse Rego to visual and back.
Five enforcement actions
Block, mask, warn, log or require human review — on every exchange.
PII detection & redaction
Presidio (23+ entity types) and AWS Comprehend (21 types) with confidence thresholds.
Regex, rate limits & skill restrictions
Pattern-match data, throttle per window, and control which tools an agent can call.
Decision API rules
Police content you can describe but can’t pattern-match — “full names”, “celebrity names”, “dog breeds” — judged in-line by OpenAI’s Decisions API on every exchange.
Has / has-NOT checks with a tunable bar
Act when content mentions the listed items, or when it’s missing one it must contain, such as a disclaimer. Set how confident the judgement must be, and see every question asked.
Fails closed, fully audited
If a decision can’t be made the exchange is denied. Every judgement is audited with per-item scores — the content itself is never stored.
Message-leg targeting
Apply rules to specific request and response legs.
11 cascade scopes
Bind policies at tenant, agent, user, channel, MCP or gateway level.
Inherited policy chain
See which broader-scope policies apply before local ones; reorder priority.
Versioned policy groups
Owners, validity windows, hash-tracked versions and full change history.
Evaluate before you ship
Real-time rule validation and config preview.
Gatekeeper request log
Every intercepted request that triggered a policy.
05Human-in-the-loop
Keep people in control
Approvals queue
A central list of flagged exchanges awaiting review.
Review with full context
Source user, sink agent, policy, matched content and the linked trace.
Reason-backed decisions
Every approve or reject is auditable — who, when, why.
HITL SLA & outcomes
Track escalations raised, resolved and pending, plus SLA compliance.
Reviewer leaderboard & override audit
Who’s reviewing, and every action taken outside policy.
06Observability
See everything, interfere with nothing
Complete logging
Every interaction and system exchange captured with rich context.
Distributed tracing
Flame-graph timelines, spans, durations and correlation IDs.
Monitors & alerts
P1–P5 priority with a full alert lifecycle — ack, resolve, dismiss, reopen.
Mute & downtime windows
Silence monitors indefinitely or until a set time, with actor tracking.
Search, stats & CSV export
Across logs, traces and alerts.
Correlated events
Related events linked by correlation ID.
07Detection
Anomaly & threat detection
Dormant reactivation
Inactive agents or users suddenly coming back to life.
Novel tool-call detection
An agent calling a tool it has never used before.
New MCP-binding detection
Agents binding to new MCP servers.
Sensitive-data detections
Flagged by the masking middleware.
Coverage gap analysis
Agents with no enforced policy, shadow-mode policies and monitor coverage.
08Compliance
Tamper-evident audit
Hash-chained logs
Signed, chained checkpoints across the audit trail.
Third-party timestamps
Optional RFC 3161 anchoring of each checkpoint.
One-click integrity checks
Verify all checkpoints, or a chosen time range, against the hash chain.
Compliance exports
Audit events and policy actions as CSV for a chosen window, with a hash-chain verification report.
EU AI Act obligation mapping
An obligation matrix built from the EU AI Act, as amended by the Digital Omnibus, applied to each system by tier, role and use case.
09Insights
Dashboards for every stakeholder
7 persona dashboards
CIO, CISO, Head of Risk & Compliance, General Counsel, Head of Technology, AI/Transformation Lead and Business Domain Owner.
Control effectiveness
Share of traffic blocked, warned or held; logged vs masked vs blocked.
Leaderboards
Top agents, users, MCP servers, channels and reviewers.
Adoption analytics
WAU/MAU stickiness, new vs returning, time-to-first-value.
Reliability
Error-budget burn, p95/p99 latency, SLOs, fleet and dependency health.
Estate & usage
Estate overview, by-channel breakdown, use-case heatmap and top failing flows.
10FinOps
Know what your AI estate costs
FinOps center
Tokens and spend across every LLM gateway call and Decision API check, hour by hour or day by day.
See who spent it
Break usage down by model, provider, gateway or consumer — agent, MCP server or user — then drill in by a second dimension.
Built-in model pricing
OpenAI, Anthropic and Google list prices out of the box; override any model, or price one that isn’t listed.
History re-costs itself
Cost is worked out when you look, so a price change re-prices past usage too — with over a year of history kept.
11Access & admin
Identity, roles & administration
SSO / identity providers
Microsoft Entra ID, Google Workspace and Okta.
Domain verification & group mapping
Auto-provision users and map IdP groups to swarmd groups.
Groups & RBAC
Granular permissions, membership and versioned config.
User management
Invite, assign roles, deactivate/reactivate, activity history.
Encrypted credentials
Secrets, keys and tokens encrypted at rest and in transit.
Built-in conversation UI
Chat directly with any agent or gateway to test.
See it running on your own infrastructure.
Book a demo, or start a free 3-month on-prem trial — unlimited, on your own prem.
How it compares with AWS, Azure and Google Cloud