# Hexel Studio > Hexel Studio builds security infrastructure for AI agents. Its product, Titan, gives every agent an identity, decides every call against your policy, brings in a person when it matters, can stop any agent at once, and keeps a record you can verify. Hexel Studio is pre-launch. Titan is in private preview. Hexel Studio has not completed a SOC 2 audit or other certification. Everything below describes what ships today; planned work is marked "coming". ## Hexel Studio: security infrastructure for AI agents > What Hexel Studio is, what Titan does, where it runs and how to start. Source: https://www.hexelstudio.com Hexel Studio builds security infrastructure for AI agents. Its product, Titan, gives every agent an identity, decides every call against your policy, brings in a person when it matters, can stop any agent at once, and keeps a record you can verify. Hexel Studio is pre-launch. Titan is in private preview. Hexel Studio has not completed a SOC 2 audit or other certification. - Category: security infrastructure for AI agents. - For: platform and security teams putting AI agents to work on real systems. - How it works: Titan sits between agents and the systems they act on. Every call gets a verified identity, a fresh policy decision and a short-lived grant; credentials are added at execution and never given to the agent; every decision goes into a ledger you can verify; any agent can be stopped at once. ### Titan Know every agent, set its behavior once, and stop any of them in an instant, wherever it runs. [Read more](https://www.hexelstudio.com/titan.md). - **Identity:** runtime principals, identity bindings and device enrollment; a Hexel Studio sign-in is exchanged for a short-lived Titan runtime token. - **Registry:** agents, revisions, agent deployments, discovery cards and control profiles, with lifecycle states and an events feed. - **Policy:** deny-wins, applied the moment it is saved; limits and obligations Titan cannot enforce are refused rather than accepted. - **Approvals:** bounded writes wait for a person. - **Kill switch:** by organization, workspace, environment, agent, deployment, session, capability, connection or destination. - **Fleet and sessions:** a fleet view with quarantine and resume; a sessions API to list, inspect and restrict sessions and read their history. - **Defender:** rules that revoke a session when they trip, with findings in the console. - **Ledger:** a per-tenant audit trail, with audit export. - **Tools:** system and organization tools with typed registration. Slack and Google Sheets connectors have run end to end in the pilot. - **Agent access:** Titan's native agent API and a remote MCP endpoint. - **Coming:** custom domains, Titan Dedicated, on-premises deployment, guardrails, budgets and behavior profiles. ### Where Titan runs - Titan Cloud (private preview): your own tenant at `.titan.hexelstudio.com`, run by Hexel Studio. - Titan Dedicated (coming next): a single-tenant Titan, run by Hexel Studio. - On-premises (coming later): your own Kubernetes cluster, on-premises and classified networks. ### Get started Request preview access at https://www.hexelstudio.com/request-access. A person reads every request and replies within one business day. ### Developers - Documentation: https://www.hexelstudio.com/docs - Quickstart: https://www.hexelstudio.com/docs/get-started/quickstart - API reference: https://www.hexelstudio.com/docs/api/introduction - Console: https://console.hexelstudio.com - System status: https://status.hexelstudio.com --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Titan: security infrastructure for AI agents > Know every agent, set its behavior once, stop any of them. Private preview. Source: https://www.hexelstudio.com/titan Know every agent, set its behavior once, and stop any of them in an instant, wherever it runs. Status: private preview. For platform and security teams. ### What Titan does - **Identity:** runtime principals, identity bindings and device enrollment; a Hexel Studio sign-in is exchanged for a short-lived Titan runtime token. - **Registry:** agents, revisions, agent deployments, discovery cards and control profiles, with lifecycle states and an events feed. - **Policy:** deny-wins, applied the moment it is saved; limits and obligations Titan cannot enforce are refused rather than accepted. - **Approvals:** bounded writes wait for a person. - **Kill switch:** by organization, workspace, environment, agent, deployment, session, capability, connection or destination. - **Fleet and sessions:** a fleet view with quarantine and resume; a sessions API to list, inspect and restrict sessions and read their history. - **Defender:** rules that revoke a session when they trip, with findings in the console. - **Ledger:** a per-tenant audit trail, with audit export. - **Tools:** system and organization tools with typed registration. Slack and Google Sheets connectors have run end to end in the pilot. - **Agent access:** Titan's native agent API and a remote MCP endpoint. - **Coming:** custom domains, Titan Dedicated, on-premises deployment, guardrails, budgets and behavior profiles. ### And more - **Self-serve tenants:** Create, view and retire tenants yourself. - **Tenant hostnames:** Your own .titan.hexelstudio.com, or your domain. - **Signing keys that renew:** Renewed automatically before they expire. - **Agent registry:** Agents, revisions and deployments. - **Lifecycle events:** Every state change on an events feed. - **Tool registry:** System and organization tools, typed once. - **Fleet view:** Every running agent in one place. - **Sessions API:** List, inspect, restrict and read history. - **Native agent API:** Execution grants signed by the gateway. - **Remote MCP:** Any MCP client, on the same policy path. - **Audit export:** Take the record with you, to your SIEM. - **Console:** Policy, approvals, fleet and ledger. ### Where Titan runs - Titan Cloud (private preview): your own tenant at `.titan.hexelstudio.com`, run by Hexel Studio. - Titan Dedicated (coming next): a single-tenant Titan, run by Hexel Studio. - On-premises (coming later): your own Kubernetes cluster, on-premises and classified networks. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Pricing > Standard (pay as you go) and Enterprise (committed rates); what is billed and what never is. Source: https://www.hexelstudio.com/pricing Titan has two plans. Rates are shared with every design partner during the preview and will be published at launch. ### Standard: Pay as you go A free allowance to start, then usage. For teams putting their first agents into production. - Identity, policy, approvals and kill switch - Defender and the Agent Ledger - Your own Titan Cloud tenant - Metered per governed action - Email support Request access: https://www.hexelstudio.com/request-access ### Enterprise: Committed rates Volume rates, billed annually. For organizations running agents on work that matters. - Everything in Standard - Committed-use rates - A service level agreement - A named team for rollout and support - Titan Dedicated, run by us Contact sales: https://www.hexelstudio.com/contact ### What is billed - **Platform fee:** one per Titan. Separate production and development Titans are an add-on. - **Governed action:** one authorized execution. A call that reached the destination and got a definitive answer. ### Never billed - Denials - Kills and freezes - Defender revocations - Approvals - Ledger entries - Registered agents - Sessions - Seats ### Compare plans | Feature | Standard | Enterprise | | --- | --- | --- | | Titan: Agent identity and registry | Yes | Yes | | Titan: Deny-wins policy | Yes | Yes | | Titan: Approvals | Yes | Yes | | Titan: Kill switch, fleet and sessions | Yes | Yes | | Titan: Defender | Early access | Early access | | Titan: Ledger and audit export | Yes | Yes | | Titan: Remote MCP and native agent API | Yes | Yes | | Deployment: Titan Cloud tenant | Yes | Yes | | Deployment: Titan Dedicated | No | Yes | | Terms and support: Pricing | Pay as you go | Committed rates | | Terms and support: Service level agreement | No | Yes | | Terms and support: Support | Email | Named team | ### Enterprise - **Committed-use rates:** volume pricing for steady workloads - **A named team:** rollout and support from people who know your setup - **Service level agreement:** an availability commitment for Titan - **Titan Dedicated:** a single-tenant Titan, run by us · private preview - **Design partners:** a paid pilot credited against the first year ### Questions #### Why aren’t rates listed? Hexel Studio is in preview. We share current rates with every design partner, and will publish them here at launch. #### What counts as a governed action? One authorized execution that reached the destination and got a definitive answer. Denials, stops, freezes, approvals and ledger entries are never billed, and every billed action is a ledger entry you can verify. #### Is there a free allowance? Yes. Standard starts with a free allowance, then you pay as you go. We share its size along with the rates. #### Can I run Titan in my own cloud? Titan runs in our cloud today, as a tenant on Titan Cloud or as a dedicated Titan for your organization. Talk to us about where you need it to run. #### How do I get started? Request access. A person reads every request and replies within one business day. We set up Titan Cloud for you, at a hostname of your own; then you connect your first agent over MCP or the API, and set its policy. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Security and AI agent governance > The controls in place today, and answers to what a security reviewer asks first. Source: https://www.hexelstudio.com/security Governance is the security model: every agent action is identified, decided by policy, run without exposing a credential, and recorded. Hexel Studio has not completed a SOC 2 audit or other certification. ### Controls in place today - **Hexel Studio Identity:** Passkeys, multi-factor sign-in and short-lived tokens. - **Agent identity:** Agents prove who they are; tokens last minutes. - **Approvals:** Sensitive actions wait for the right person. - **Signed, short-lived grants:** One call, 30 seconds, bound to its exact arguments. - **Credential vault:** Secrets are added at execution, never given to the agent. - **Egress control:** HTTPS only, to the exact host, with no redirects. - **Isolation by identity:** Every record is scoped to your organization. - **Kill switch:** By organization, workspace, environment, agent, deployment, session, capability, connection or destination. - **Verifiable audit:** Signed events and a tamper-evident ledger. ### Questions #### Where does our data live? In Titan Cloud, in a tenant of your own. Every record carries your organization, workspace and environment, and every query is scoped by your token. #### Do agents ever hold our credentials? No. Credentials stay in an encrypted vault and are added at execution, one call at a time. The agent gets the result, never the key. #### What gets recorded, and can it be changed? Every decision, approval, execution and stop goes into the Agent Ledger, each entry sealed to the one before. Audit events are signed, archived write-once and kept for two years by default, and any one of them can be verified. #### What does a stop actually stop? Everything after it. A stopped session, agent, connection or organization is refused from the very next call. A stop can’t recall data that already left, or undo a change another system already made. #### What happens if Titan can’t be reached? Governed actions stop. Without a decision there is no grant, and without a grant no credential is added, so the action is refused rather than waved through. #### Can it run inside our own environment? Not yet. Titan Dedicated is next. Your own Kubernetes cluster, on-premises and classified networks come later. #### Are you SOC 2 certified? Not yet. Hexel Studio is pre-launch, and we won’t claim SOC 2 or any other certification until we have the report. ### Report a vulnerability Email security@mail.hexelstudio.com. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## About Hexel Studio > Mission, principles and team. Source: https://www.hexelstudio.com/company Hexel Studio's mission is to make AI agents safe to put to work. Its first product is Titan, the control plane between agents and the systems they touch. ### Principles - **Governance is infrastructure:** Decided before an action runs, not bolted on after. - **Authority stays with people:** Agents do the work. People decide, and can stop anything. - **Never hand over the keys:** Agents carry short-lived grants, never credentials. - **Keep a record you can check:** Every decision is written down, and anyone can verify it. - **Say what’s real:** We describe what ships today, and label the rest as coming. - **Build with the people who run it:** Titan grows with design partners running real agents. ### Team - Khushwant Sanwalot, Founder (https://www.linkedin.com/in/khushwant-sanwalot/) ### More - Careers: https://www.hexelstudio.com/careers - Help: https://www.hexelstudio.com/company/help --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Careers > Open roles at Hexel Studio. Source: https://www.hexelstudio.com/careers Help put agents to work, safely. - [Staff Runtime Engineer](https://www.hexelstudio.com/careers/staff-runtime-engineer.md): Runtime, Remote (global), Full-time. Own the core that schedules and governs agent execution across the platform. - [Product Designer](https://www.hexelstudio.com/careers/product-designer.md): Design, Remote (global), Full-time. Shape how engineers experience governance, approvals, and traces. - [Developer Advocate](https://www.hexelstudio.com/careers/developer-advocate.md): DevRel, Remote (US / EU), Full-time. Help engineering teams ship governed agents with confidence. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Staff Runtime Engineer, Careers > Full-time, Remote (global). Own the core that schedules and governs agent execution across the platform. Source: https://www.hexelstudio.com/careers/staff-runtime-engineer Own the core that schedules and governs agent execution across the platform. - Team: Runtime - Location: Remote (global) - Type: Full-time ### What you'll do - Design and build the governed execution runtime. - Drive latency and reliability of the policy decision path. - Partner with the Titan team on isolation and identity. ### What you'll bring - 8+ years building distributed systems. - Deep experience with low-latency services. - Comfort owning a system end-to-end. Apply for this role: https://www.hexelstudio.com/contact. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Product Designer, Careers > Full-time, Remote (global). Shape how engineers experience governance, approvals, and traces. Source: https://www.hexelstudio.com/careers/product-designer Shape how engineers experience governance, approvals, and traces. - Team: Design - Location: Remote (global) - Type: Full-time ### What you'll do - Design console workflows for agents, approvals, and audit. - Own the design system alongside engineering. - Turn complex governance into clear, fast interfaces. ### What you'll bring - Strong portfolio of technical product work. - Fluency in design systems and prototyping. - Care for density, clarity, and craft. Apply for this role: https://www.hexelstudio.com/contact. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Developer Advocate, Careers > Full-time, Remote (US / EU). Help engineering teams ship governed agents with confidence. Source: https://www.hexelstudio.com/careers/developer-advocate Help engineering teams ship governed agents with confidence. - Team: DevRel - Location: Remote (US / EU) - Type: Full-time ### What you'll do - Build demos, guides, and reference architectures. - Engage the community and gather product feedback. - Represent developers inside the company. ### What you'll bring - Hands-on with agent frameworks and SDKs. - Excellent written and verbal communication. - A builder’s instinct. Apply for this role: https://www.hexelstudio.com/contact. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## News > Product updates and announcements. Source: https://www.hexelstudio.com/news - 2026-10-08: [Introducing Titan](https://www.hexelstudio.com/news/titan-private-preview.md). Titan sits between agents and the systems they act on. Every call gets a verified identity, a fresh policy decision and a short-lived grant, and any of it can be stopped. - 2026-10-02: [Device and CLI sign-in for Hexel Studio accounts](https://www.hexelstudio.com/news/device-sign-in.md). Command-line tools and devices without a browser can now sign in with a Hexel Studio account by approving the request in a browser. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Introducing Titan > 2026-10-08. Titan sits between agents and the systems they act on: every call gets a verified identity, a fresh policy decision and a short-lived grant. Source: https://www.hexelstudio.com/news/titan-private-preview Published 2026-10-08 · Product Titan sits between agents and the systems they act on. Every call gets a verified identity, a fresh policy decision and a short-lived grant, and any of it can be stopped. Agents are starting to act on real systems: opening issues, posting messages, editing spreadsheets. Titan is how you let them, without handing over the keys or losing track of what happened. Titan is in private preview with design partners. ### Decided on every call Each request is checked against your policy at the moment it is made. Rules can look at the workspace, environment, agent, capability, resource, destination and time of day. The answer is one of three: allow, require approval, or deny. ### People where it matters Actions that need a person wait for one. Approval profiles set who can approve, how many approvals are needed, and that the requester cannot approve their own action. ### Grants, not keys When an action is allowed, Titan issues a signed grant that lasts at most 30 seconds and is bound to the exact arguments. The grant is checked again when the call runs, and the credential is added only for that call. The agent never holds a key. ### Stop anything One stop covers a session, an agent, a connection or the whole organization, and refuses the very next call. Every step is written to a ledger you can verify. Talk to us: https://www.hexelstudio.com/contact --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Device and CLI sign-in for Hexel Studio accounts > 2026-10-02. Command-line tools and devices without a browser can now sign in with a Hexel Studio account by approving the request in a browser. Source: https://www.hexelstudio.com/news/device-sign-in Published 2026-10-02 · Identity Command-line tools and devices without a browser can now sign in with a Hexel Studio account by approving the request in a browser. Public device clients, like a CLI on a server or a tool on a headless machine, can now sign in through browser approval. The device shows a code; you approve it in the browser; the device gets tokens for your Hexel Studio account and can exchange them for access to your organization and workspaces. Validation covered device polling, browser activation, organization exchange, workspace access, token renewal and rejection of reused codes and foreign organizations. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Contact > Who to email for sales, enterprise plans, support and security. Source: https://www.hexelstudio.com/contact - **Sales and access:** sales@hexelstudio.com. Preview access and plans. - **Enterprise:** enterprise@hexelstudio.com. Committed rates, a named team and a service level agreement. - **Support:** support@mail.hexelstudio.com. Help with your account or the console. - **Security:** security@mail.hexelstudio.com. Report a vulnerability. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Request access > Request preview access to Titan. Source: https://www.hexelstudio.com/request-access Request preview access to Titan with the form at https://www.hexelstudio.com/request-access: tell us what your agents do. ### What happens next 1. **We reply:** A person reads every request, within one business day. 2. **Your tenant:** We set up Titan Cloud for you, at a hostname of your own. 3. **Your first agent:** Connect it over MCP or the API, and set its policy. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Help > Where to get help with accounts, the console, Titan and security reports. Source: https://www.hexelstudio.com/company/help - **Account and sign-in:** Passkeys, multi-factor sign-in, and signing in from a CLI or device. Read the guides: https://www.hexelstudio.com/docs - **Organizations and access:** Invite people, manage workspaces and roles in the console. Open the console: https://console.hexelstudio.com - **Titan:** Questions about agents, policy or your tenant. Email support: support@mail.hexelstudio.com?subject=Titan - **Service status:** Check whether a service is having trouble right now. View status: https://status.hexelstudio.com - **Report a security issue:** Found a vulnerability? Tell us privately and we’ll respond quickly. Email security: security@mail.hexelstudio.com - **Anything else:** Billing, access to previews, or something we haven’t thought of. Email support: support@mail.hexelstudio.com --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Legal > Terms, policies and disclosures. Source: https://www.hexelstudio.com/legal ### Agreements The terms between you and Hexel Studio. - [Terms of Service](https://www.hexelstudio.com/legal/terms): The agreement that governs use of the platform, APIs and services. Updated June 2026. - [Data Processing Addendum](https://www.hexelstudio.com/legal/dpa): How Hexel Studio processes personal data on your behalf. Updated June 2026. - [Service Level Agreement](https://www.hexelstudio.com/legal/sla): The availability commitment for the control plane, and the credits if we fall short. Updated June 2026. ### Policies How we handle data, and what the services may be used for. - [Privacy Policy](https://www.hexelstudio.com/legal/privacy): What personal information we collect, why, and the rights you have over it. Updated June 2026. - [Cookie Policy](https://www.hexelstudio.com/legal/cookies): The cookies the website and console use, and how to manage them. Updated June 2026. - [Acceptable Use Policy](https://www.hexelstudio.com/legal/acceptable-use): What you may not do with the platform, and how we respond to misuse. Updated June 2026. ### Disclosures Who helps us deliver the services. - [Sub-processors](https://www.hexelstudio.com/legal/sub-processors): The third parties that help deliver the services, and where they operate. Updated June 2026. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Terms of Service > The agreement that governs use of the platform, APIs and services. Source: https://www.hexelstudio.com/legal/terms Agreement, agreements. The agreement that governs use of the platform, APIs and services. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/terms; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Data Processing Addendum > How Hexel Studio processes personal data on your behalf. Source: https://www.hexelstudio.com/legal/dpa Addendum, agreements. How Hexel Studio processes personal data on your behalf. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/dpa; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Service Level Agreement > The availability commitment for the control plane, and the credits if we fall short. Source: https://www.hexelstudio.com/legal/sla Commitment, agreements. The availability commitment for the control plane, and the credits if we fall short. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/sla; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Privacy Policy > What personal information we collect, why, and the rights you have over it. Source: https://www.hexelstudio.com/legal/privacy Policy, policies. What personal information we collect, why, and the rights you have over it. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/privacy; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Cookie Policy > The cookies the website and console use, and how to manage them. Source: https://www.hexelstudio.com/legal/cookies Policy, policies. The cookies the website and console use, and how to manage them. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/cookies; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Acceptable Use Policy > What you may not do with the platform, and how we respond to misuse. Source: https://www.hexelstudio.com/legal/acceptable-use Policy, policies. What you may not do with the platform, and how we respond to misuse. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/acceptable-use; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt ## Sub-processors > The third parties that help deliver the services, and where they operate. Source: https://www.hexelstudio.com/legal/sub-processors List, disclosures. The third parties that help deliver the services, and where they operate. Updated June 2026. The full text is at https://www.hexelstudio.com/legal/sub-processors; that page is authoritative. --- Hexel Studio · https://www.hexelstudio.com · Index for agents: https://www.hexelstudio.com/llms.txt