# Titan: security infrastructure for AI agents

> Know every agent, set its behavior once, stop any of them. Private preview.

Source: https://www.hexelstudio.com/titan

Know every agent, set its behavior once, and stop any of them in an instant, wherever it runs.

Status: private preview. For platform and security teams.

## What Titan does

- **Identity:** runtime principals, identity bindings and device enrollment; a Hexel Studio sign-in is exchanged for a short-lived Titan runtime token.

- **Registry:** agents, revisions, agent deployments, discovery cards and control profiles, with lifecycle states and an events feed.

- **Policy:** deny-wins, applied the moment it is saved; limits and obligations Titan cannot enforce are refused rather than accepted.

- **Approvals:** bounded writes wait for a person.

- **Kill switch:** by organization, workspace, environment, agent, deployment, session, capability, connection or destination.

- **Fleet and sessions:** a fleet view with quarantine and resume; a sessions API to list, inspect and restrict sessions and read their history.

- **Defender:** rules that revoke a session when they trip, with findings in the console.

- **Ledger:** a per-tenant audit trail, with audit export.

- **Tools:** system and organization tools with typed registration. Slack and Google Sheets connectors have run end to end in the pilot.

- **Agent access:** Titan's native agent API and a remote MCP endpoint.

- **Coming:** custom domains, Titan Dedicated, on-premises deployment, guardrails, budgets and behavior profiles.

## And more

- **Self-serve tenants:** Create, view and retire tenants yourself.

- **Tenant hostnames:** Your own <tenant>.titan.hexelstudio.com, or your domain.

- **Signing keys that renew:** Renewed automatically before they expire.

- **Agent registry:** Agents, revisions and deployments.

- **Lifecycle events:** Every state change on an events feed.

- **Tool registry:** System and organization tools, typed once.

- **Fleet view:** Every running agent in one place.

- **Sessions API:** List, inspect, restrict and read history.

- **Native agent API:** Execution grants signed by the gateway.

- **Remote MCP:** Any MCP client, on the same policy path.

- **Audit export:** Take the record with you, to your SIEM.

- **Console:** Policy, approvals, fleet and ledger.

## Where Titan runs

- Titan Cloud (private preview): your own tenant at `<tenant>.titan.hexelstudio.com`, run by Hexel Studio.

- Titan Dedicated (coming next): a single-tenant Titan, run by Hexel Studio.

- On-premises (coming later): your own Kubernetes cluster, on-premises and classified networks.

---

Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt