# Hexel Studio: security infrastructure for AI agents

> What Hexel Studio is, what Titan does, where it runs and how to start.

Hexel Studio builds security infrastructure for AI agents. Its product, Titan, gives every agent an identity, decides every call against your policy, brings in a person when it matters, can stop any agent at once, and keeps a record you can verify.

Hexel Studio is pre-launch. Titan is in private preview. Hexel Studio has not completed a SOC 2 audit or other certification.

- Category: security infrastructure for AI agents.

- For: platform and security teams putting AI agents to work on real systems.

- How it works: Titan sits between agents and the systems they act on. Every call gets a verified identity, a fresh policy decision and a short-lived grant; credentials are added at execution and never given to the agent; every decision goes into a ledger you can verify; any agent can be stopped at once.

## Titan

Know every agent, set its behavior once, and stop any of them in an instant, wherever it runs. [Read more](https://www.hexelstudio.com/titan.md).

- **Identity:** runtime principals, identity bindings and device enrollment; a Hexel Studio sign-in is exchanged for a short-lived Titan runtime token.

- **Registry:** agents, revisions, agent deployments, discovery cards and control profiles, with lifecycle states and an events feed.

- **Policy:** deny-wins, applied the moment it is saved; limits and obligations Titan cannot enforce are refused rather than accepted.

- **Approvals:** bounded writes wait for a person.

- **Kill switch:** by organization, workspace, environment, agent, deployment, session, capability, connection or destination.

- **Fleet and sessions:** a fleet view with quarantine and resume; a sessions API to list, inspect and restrict sessions and read their history.

- **Defender:** rules that revoke a session when they trip, with findings in the console.

- **Ledger:** a per-tenant audit trail, with audit export.

- **Tools:** system and organization tools with typed registration. Slack and Google Sheets connectors have run end to end in the pilot.

- **Agent access:** Titan's native agent API and a remote MCP endpoint.

- **Coming:** custom domains, Titan Dedicated, on-premises deployment, guardrails, budgets and behavior profiles.

## Where Titan runs

- Titan Cloud (private preview): your own tenant at `<tenant>.titan.hexelstudio.com`, run by Hexel Studio.

- Titan Dedicated (coming next): a single-tenant Titan, run by Hexel Studio.

- On-premises (coming later): your own Kubernetes cluster, on-premises and classified networks.

## Get started

Request preview access at https://www.hexelstudio.com/request-access. A person reads every request and replies within one business day.

## Developers

- Documentation: https://www.hexelstudio.com/docs

- Quickstart: https://www.hexelstudio.com/docs/get-started/quickstart

- API reference: https://www.hexelstudio.com/docs/api/introduction

- Console: https://console.hexelstudio.com

- System status: https://status.hexelstudio.com

---

Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt