# MITRITY

> MITRITY is an Intent-Aware Governance (IAG) platform that governs and secures autonomous AI agents. Its runtime sits beside the agents you run and validates every action they attempt against the agent's declared mission scope, before the action executes; read-only connectors bring the agents that live inside SaaS platforms into the same inventory, reviews and audit trail.

The platform has two halves. Govern: agent lifecycle approvals (assessments pre-filled from observed behavior, attested reviews with separation of duties, periodic reviews, and an approval gate that can refuse non-approved agents at runtime), EU AI Act and NIST AI RMF posture control by control, an AI risk register, AI policy statements with attestation, compliance reports with integrity hashes, evidence bundles and share links, and a tamper-evident audit trail with signed checkpoints. Secure: runtime enforcement in the customer environment (Mitrity Gateway for HTTP-based agents, MCP Sidecar for MCP-compatible agents, mesh integration, and the LLM Gateway for Anthropic, OpenAI, Azure OpenAI / AI Foundry, Google Vertex AI, Amazon Bedrock and any OpenAI-compatible host), behavioral drift detection, prompt-injection defense, DLP, credential brokering, delegation-chain governance, red teaming, model scanning and threat intelligence. SaaS connectors cover Microsoft 365 Copilot and Copilot Studio, Salesforce Agentforce, GitHub Copilot and Snowflake Cortex Agents. MITRITY AB is headquartered in Stockholm, Sweden.

## Docs

- [Quickstart](https://mitrity.com/docs/getting-started/quickstart): Deploy your first governed agent in under 10 minutes
- [Documentation](https://mitrity.com/docs): Full product documentation — gateway, sidecar, policies, security, API, integrations
- [API reference](https://mitrity.com/docs/api-reference): Interactive reference for the MITRITY REST API
- [OpenAPI specification](https://mitrity.com/openapi.yaml): Raw OpenAPI 3.1 document for the platform API
- [Integration modes](https://mitrity.com/docs/edge/modes): Gateway, Sidecar & Mesh — how agent traffic reaches MITRITY
- [SaaS-embedded agents](https://mitrity.com/docs/saas-agents/overview): Read-only connectors that discover, observe and posture-check the agents inside Microsoft 365 Copilot and Copilot Studio, Salesforce Agentforce, GitHub Copilot and Snowflake Cortex
- [Governed shell](https://mitrity.com/docs/edge/governed-shell): The gateway's sandboxed shell — judged bytes execute, credentials injected outside the command line, egress allowlisted
- [Host observer](https://mitrity.com/docs/edge/host-observer): The Linux host observer — every process execution attributed to governance from kernel process ancestry; ungoverned execution is a finding, not a heuristic

## Govern

- [Governance lifecycle](https://mitrity.com/docs/compliance/governance-lifecycle): Approve agents before they run — lifecycle statuses, assessments pre-filled from observed behavior, attested reviews with separation of duties, periodic reviews, findings that open reviews, and an approval gate that can refuse non-approved agents at runtime
- [Approval workflows](https://mitrity.com/docs/policies/approval-workflows): Hold individual actions for a human decision, with timeouts and notifications
- [Policy versions](https://mitrity.com/docs/policies/versioning): Every policy save recorded as a version; each agent shows whether it runs the version its approval named
- [Compliance frameworks](https://mitrity.com/docs/compliance/frameworks): EU AI Act and NIST AI RMF posture, control by control, computed from the governance record with every gap stated
- [AI risk register](https://mitrity.com/docs/compliance/risk-register): Inherent and residual risk per agent or program, with owners, accepted-risk justifications and a computed residual from live signals
- [AI policy statements](https://mitrity.com/docs/compliance/ai-policy): Versioned policy statements per principle, with a roster of who attested to the version in force
- [Compliance reports](https://mitrity.com/docs/compliance/reports): SOC 2, GDPR, ISO 27001, executive, inventory, AI assessment and framework reports with integrity hashes, evidence bundles, share links and schedules
- [Tamper-evident audit trail](https://mitrity.com/docs/security/audit-trail): Hash-chained audit events anchored by signed checkpoints — verify a period from the dashboard, the API or offline

## Secure

- [LLM Gateway](https://mitrity.com/docs/edge/llm-gateway): Governed model traffic to Anthropic, OpenAI, Azure OpenAI / AI Foundry, Google Vertex AI, Amazon Bedrock (OpenAI-compatible API) and any OpenAI-compatible host — DLP, model allowlists, token caps, budgets and rate limits
- [Red teaming](https://mitrity.com/docs/security/red-teaming): Governed adversarial campaigns against LLM routes and your own agent endpoints — every attempt governed, audited and budgeted, full prompts and responses kept in your environment, findings mapped to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, the EU AI Act and ISO/IEC 42001
- [Model scanning](https://mitrity.com/docs/security/model-scanning): Scan model repositories without executing anything — pickle and PyTorch archives, safetensors and GGUF headers, hidden instructions, remote-code surfaces, unpinned revisions — and check hosted models observed at the gateway
- [AI Bill of Materials](https://mitrity.com/docs/security/aibom): The MCP servers your agents invoke and the models they load, with risk ratings and drift advisories
- [Injection detection](https://mitrity.com/docs/security/injection-detection): Prompt-injection screening before content reaches an agent
- [Credential broker](https://mitrity.com/docs/security/credential-broker): Just-in-time credential leases instead of standing secrets

## Product

- [Platform](https://mitrity.com/platform): The two halves of the MITRITY platform — Govern and Secure — pillar by pillar
- [Solutions](https://mitrity.com/solutions): Industry use cases, and the problems MITRITY solves, from approving agents to red-teaming them
- [Pricing](https://mitrity.com/pricing): Starter, Pro, and Enterprise plans

## Academy

- [MITRITY Academy](https://mitrity.com/academy): Free hands-on training in AI agent governance, with certificates

## Company

- [About](https://mitrity.com/about): Company, mission, and team
- [Contact](https://mitrity.com/contact): Sales, support, and security contacts
- [Careers](https://mitrity.com/careers): Open roles at MITRITY
- [Blog](https://mitrity.com/blog): Engineering and product notes (RSS: https://mitrity.com/feed.xml)

## Legal & Trust

- [Terms of Service](https://mitrity.com/terms): The agreement governing use of the platform
- [Privacy Policy](https://mitrity.com/privacy): How personal data is collected, used, and protected
- [Data Processing Agreement](https://mitrity.com/dpa): GDPR Article 28 processing terms and sub-processor list
- [Service Level Agreement](https://mitrity.com/sla): Uptime commitments and support levels
- [Acceptable Use Policy](https://mitrity.com/acceptable-use): What you may and may not do with the platform
- [AI transparency](https://mitrity.com/ai): How MITRITY uses AI, and how AI systems should interact with this site
- [security.txt](https://mitrity.com/.well-known/security.txt): Coordinated vulnerability disclosure — report to soc@mitrity.com