RUTILE

Govern agents, not their content

The analysis server runs inside your data center. No MITM certificate, no content decryption. Every decision is logged, tamper-evident.

See the deployment
DEPLOYMENT

GABA traffic never leaves your boundary

Endpoints, the analysis server and the dashboard all live inside your data center. Switch modes to see what changes when the external network disappears.

Customer data center
Endpoint
GABA agent
Endpoint
GABA agent
Endpoint
GABA agent
Analysis server
Policies · event intake
Dashboard
External network
AI tool traffic
  • Events · policy bundle
  • Logs · decisions
  • AI tools' own outbound traffic
Analysis server location
Customer data center
GABA data leaving the boundary
0
External network
Only the AI tools' own traffic passes. GABA never opens it.

Discovery, policy enforcement and audit trails work the same way in an air-gapped environment.

CONTENT PATH

One request. Two very different trust models.

MITM decrypts traffic for inspection. GABA keeps content sealed and uses endpoint OS signals to allow or block behavior.

MITM PROXY

Open content to inspect

AI agent
TLS inspection proxyDecrypt request / response
DestinationRe-encrypt & forward

Root CA required · Proxy can access the payload

GABA

Sealed content, behavior control

AI agent
Allowed encrypted traffic
DestinationEnvelope stays sealed
OS kernel signals
GABA endpointEvaluate + enforce policyAllow / block ↑
Audit eventMetadata + decision

Traffic bypasses GABA · No decryption · No root CA

THE DIFFERENCE AT A GLANCE

MITM controls by opening content. GABA controls by evaluating behavior.

Trusted certificate
MITM proxy

Root CA required for TLS inspection

GABA

None

Position
MITM proxy

Inside the traffic path

GABA

On the endpoint via OS signals

Payload visible to control
MITM proxy

Request and response body

GABA

None

Evidence source
MITM proxy

Decrypted traffic

GABA

OS behavior metadata

COMPLIANCE MAPPING

Requirements, mapped to capabilities

Each framework's requirement themes are mapped to GABA's four capabilities. Click a theme to open its explanation.

Maps to the safeguard themes of the Korean information security and privacy management system.

  • AI tools running in the organization are detected automatically and kept in an inventory.

Four design commitments

  1. On-prem · air-gap

    The analysis server runs in your data center. Nothing egresses to the cloud.

  2. ISMS-P · financial regulation

    Immutable audit trails meet certification and supervisory requirements.

  3. Zero decryption

    We never open content. No MITM certificate, so no adoption friction and no legal risk.

  4. EU AI Act · OWASP LLM

    Policies and audit checks are modeled on the EU AI Act and the OWASP Top 10 for LLM applications.

Don't block AI. Make it controllable.

See how GABA Governance works in a 30-minute demo.