Platform
One decision point for every tool you run
Discover, decide, grant, govern agents, act and prove, all on one graph.
ConteXengine sits above the tools you already run and decides every access call from context. It replaces no directory, vault or governance platform; it is the layer in the middle that none of them is.
IxDiscover
Every human, machine identity and AI agent on one graph, built from the signals already in your estate, with owners, reach and blast radius computed, not estimated.
- Reads directories, identity providers, HR, cloud, data platforms, ticketing and agent registries through 40+ connectors, with no agents on endpoints.
- Resolves accounts, keys, roles and entitlements into one identity graph: who holds what, through which group, to which system and data element.
IxDecide
Identity security posture management (ISPM), computed from live decisions, not from attestations.
- Scores every identity on one contract, whether it is a human, a machine identity or an AI agent, and gives the reason behind each score.
- Ranks exposure by blast radius and shows where risk is heading, identity by identity, before it arrives.
IxGrant
Just-in-time access the right way: access decided at the moment of the request, checked against the ticket, and taken back on its own, on the same rails for humans, machines and AI agents.
- Converts standing privilege to just-in-time without redesigning roles: what you already hold is an input.
- Validates each request against change windows, risk, MFA, device, network and separation of duties, live.
IxAgent
Every AI agent becomes a governed identity with an owner, a credential state, a score and a limit it cannot exceed. No agent exceeds the human it works for.
- Registers the agents it discovers, works with the discovery platforms you already run, and flags credentials that never expire and owners that don’t exist.
- Bounds every tool call by the delegating human: effective scope is the agent’s grants intersected with the human’s computed reach, recomputed per call.
IxAct
Containment becomes an action instead of a ticket: the grant ends in every connected system in seconds, with a record of each.
- Seventeen built-in actions, among them disable, revoke sessions, remove access, rotate credentials and convert to just-in-time, on every connected system that supports them.
- Response actions run with the approvals you set, and every run is recorded.
IxProve
Posture per framework is computed from the live decision ledger, each control shows what is evaluated, enforced and drifting, and evidence packs export on demand. The audit is done before anyone asks.
- Maps decisions to the frameworks you answer to (SOX, PCI DSS, HIPAA, GDPR, SOC 2) and computes posture continuously.
- Shows each control: evaluated, enforced, violations, exceptions and who accepted them.
One graph from the systems you own, with nothing to replace.
Hover any mark. Connectors read signals at runtime, and a source that stops delivering stays visibly dark.
Context, not policy.
ConteXengine reads the systems you already run, builds one graph of every identity, and computes each decision at the moment of the request.
Runs inside your boundary · no model on the decision path · 40+ connectors · complements every tool you own, replaces none.