Compose GRC, DLP and security workflows on a canvas — drag in reusable agents, wire them to your live tools, and deploy a single config file to a runtime that already runs the agents. One platform, infinite workflows.
The deterministic engine owns the facts and math; the agents own language and judgment. You own the composition.
Drag atomic agents onto the canvas and wire their typed ports. The orchestrator coordinates fan-out, parallelism and human-in-the-loop gates.
Open builder →Bind each agent's tool-port to a live connection — CrowdStrike, Okta, ServiceNow, Wiz and 20 more — through one unified gateway.
Browse integrations →Download a single workflow config. The agents already run in your environment; the config just tells them how to behave. Reusable, modular, versioned.
How deployment works →Each agent is one control loop plus a swappable tool and a persona. The same Retrieval agent grounds a DLP decision or an OWASP check — you just re-bind it.
23 vendor adapters with credentialed connections, a real lifecycle and correlated assets — through a single gateway.
The agent runtime is already installed in the client environment. A workflow is just a declarative config that tells those agents how to behave — which harness, which tool, which persona, which connection. Download it, drop it in, run it.
{
"autoxConfigVersion": "1.0",
"workflow": { "id": "aegis", "name": "AEGIS — DLP Triage" },
"nodes": [
{ "id": "orch", "use": "orchestrator",
"bind": { "routing": "graph" } },
{ "id": "threat", "use": "retrieval",
"bind": { "tool": "web", "persona": "authoritative",
"connection": "fp-dlp" } },
{ "id": "act", "use": "action", "hil": true,
"bind": { "tool": "servicenow",
"connection": "snow-cmdb" } }
],
"policies": { "hil": ["act"], "audit": "all" }
}Open the canvas, drop in the AEGIS reference, press Run, and watch the agents think.