Skip to content
Contact salesRequest access

Titan

Private previewFor platform and security teams

Every agent.One source of truth.

Know every agent, set its behavior once, and stop any of them in an instant, wherever it runs.

Request accessHow it works
agents · policy · vault · ledger · systems

How it works

In the path, not beside it.

Titan decides every action, holds the key, gets the approval and seals the record, for laptop and cloud agents alike. Model guardrails filter what an agent says; identity tools hand it a key. Titan stands between the agent and the system it touches.

One path for every actionAgent asks, policy decides, a person approves, the gateway adds the key, the ledger records.

01

Identity

Every agent is a principal of its own, never a shared key.

  • Runtime principals and identity bindings
  • Device enrollment with device keys
  • Your sign-in exchanged for a short-lived runtime token
release-botactive
Owner
platform · acme
Bound to
its workload
Device key
enrolled · ed25519
Runtime token
expires in 4:59

02

Policy

A deny-wins rule engine decides every call.

  • Changes take effect the moment you save
  • Rules it can’t enforce are refused, not ignored
  • Capabilities picked per tenant
  • slack.post #generalAllowed
  • sheets.update_forecastNeeds approval
  • crm.delete_customersDenied

policy saved · live now

03

Approvals

Writes that matter wait for a person.

  • Decided in the console or through Slack
  • MCP clients get “input required” while they wait
  • Every decision lands in the Ledger
titan · approvalsacme · finance
$finance-agent  sheets.update_forecast Q3  rule 12 · writes to finance need a person  asked maya in #approvals · 14:02:26✓approved by maya · 14:02:38 · bound to these arguments✓executed · grant a41f · 30s  the same approval cannot be replayed for another call

04

Kill switch

Stop anything, from one connection to the whole organization.

  • Nine levels, each refused from the very next call
  • Freeze an environment: writes stop, reads continue
  • Quarantine an agent, then resume it

Stop at

  • Organization
  • Workspace
  • Environment
  • Agent
  • Deployment
  • Session
  • Capability
  • Connection
  • Destination
Environment
production · frozen 14:10
Effect
writes refused · reads continue

05

Early access

Defender

Watches every session and revokes it when a rule trips.

  • Deny bursts and resource probing
  • Rejected results and invocation rate
  • Findings in the console, on every tenant
titan · defenderearly access
research-agent · session 7f3a · watching  14:04:31  42 calls / 10s · rule: deny burst✕session revoked by defender · 14:04:32  next call refused · owner notified · ledger #f58a…02  rules: bursts · probing · rejected results · rate

06

Ledger

Every decision, written down for your tenant.

  • Readable per tenant
  • Session history through the sessions API
  • Audit export to your SIEM when you need it
acme · agent ledgerhash-chained · signed
  1. 14:02:11sheets.read_invoicese02b…71 ←
  2. 14:02:38sheets.update_forecast · approved · mayaa41f…9c ←
  3. 14:03:04crm.export_customers7c90…e3 ←
  4. 14:03:20github.merge main11de…b8 ←
  5. 14:04:51session · defender · burstf58a…02

Also live on Titan Cloud

And much more.

  • 01

    Self-serve tenants

    Create, view and retire tenants yourself.

  • 02

    Tenant hostnames

    Your own <tenant>.titan.hexelstudio.com, or your domain.

  • 03

    Signing keys that renew

    Renewed automatically before they expire.

  • 04

    Agent registry

    Agents, revisions and deployments.

  • 05

    Lifecycle events

    Every state change on an events feed.

  • 06

    Tool registry

    System and organization tools, typed once.

  • 07

    Fleet view

    Every running agent in one place.

  • 08

    Sessions API

    List, inspect, restrict and read history.

  • 09

    Native agent API

    Execution grants signed by the gateway.

  • 10

    Remote MCP

    Any MCP client, on the same policy path.

  • 11

    Audit export

    Take the record with you, to your SIEM.

  • 12

    Console

    Policy, approvals, fleet and ledger.

Deployment

Runs where you need it. One Titan, one policy.

  • 01Private preview

    Titan Cloud

    Hexel Studio's cloud, isolated by organization

    Working in an afternoon. Your tenant hostname or your own domain.

  • 02Private preview

    Titan Dedicated

    A Titan for one organization, in our cloud

    Your own control plane, your own keys and records, and we run it.

For developers

One API.
Every agent.

Put Titan in front of any agent, over MCP or its native API.

Read the docsTalk to an engineer
Remote MCP
Streamable HTTP · any MCP client
Native API
execution grants signed by the gateway
Laptops
Claude Code · Codex · Kiro hooks
mcp.json
{
  "mcpServers": {
    "titan": {
      "url": "https://api.hexelstudio.com/v1/titan/agent/mcp",
      "headers": { "Authorization": "Bearer $TITAN_RUNTIME_TOKEN" }
    }
  }
}

Bring your agents under control.

Titan is in private preview with design partners.

Request accessContact sales