Xnode Cortx: AI Control Plane for Agentic AI In Your Network

Most enterprises can build an AI agent. Far fewer can put one into production, because the controls their security, risk and compliance functions require do not exist between the agent and the company's data. Xnode Cortx closes that gap. It is an AI Control Plane that supplies identity, access control, guardrails and audit as infrastructure, so an agent inherits the same permissions and accountability as the person it acts for.

GOVERNANCE ACROSS FOUR AXES

Identity and access. Single sign on through OIDC, SAML, Microsoft Entra, Active Directory and LDAP, with SCIM lifecycle management and support for multiple identity providers. The end user's own identity is carried through to every downstream system, so the source system's permissions still apply instead of being bypassed by a shared service account.

Policy and guardrails. A hierarchical policy model spanning organisation, department, workspace, model group, team and individual user. Detection categories with configurable pattern libraries, maker checker approval on policy changes, and a resolver view that shows exactly which policy determined each outcome for a named user, with drill down to the rule that fired.

Model eligibility. Data classification is applied to the data object rather than only the request, so content that must never reach an external model is blocked from doing so regardless of who asks or which agent is running.

Tool and data access. An MCP Gateway that governs which tools an agent can reach and under whose credentials, with access control extended across databases, SaaS applications, file stores and retrieval pipelines. Read only and full access toolkits can be assigned separately.

OBSERVABILITY AND CONTROL

A tamper evident, hash chained record of every allow and deny. Agent and model level cost tracking with budget enforcement. Agent evaluation against the customer's own data sets, comparing models side by side on the same questions. Discovery of unsanctioned AI use across the environment.

DEPLOYMENT

Xnode Cortx runs entirely within the customer's environment on Kubernetes, on premises or in the customer's own cloud tenant. Supported patterns are controlled egress, sovereign cloud and fully air gapped. No customer data leaves the customer's perimeter, and no ongoing connection to XNODE is required to operate the platform.

COMPLIANCE

SOC 2 Type II, ISO/IEC 27001, ISO/IEC 42001, GDPR and HIPAA.

WHO IT IS FOR

Financial services, government and public sector, healthcare and manufacturing. Typical buyers are CISOs, heads of data, and AI platform teams who need agentic AI in production under the same controls that already govern their other systems.