The Security of Lithos AOS
Applications that control what AI agents can act and whether they’re behaving.
Phylax
Non-Human Identity (NHI) & Agent Governance
Phylax is your authoritative registry for every AI agent in your fleet. As autonomous AI systems proliferate, knowing which agents are active, what they're doing, and whether their behavior is drifting is no longer optional. Phylax tracks behavioral deviation scores per event, automatically flags anomalous agents, and enforces quarantine — so your team stays in control of your AI workforce, not the other way around.
Arca
Non-Human Identity (NHI) Vault
Arca replaces long-lived API keys with short-lived, cryptographically signed identity tokens for your AI agents. Every agent authenticates with an RS256 JWT issued by Arca — valid for a configurable window, with the signing key published at a standard JWKS endpoint for any service to verify. Token IDs are stored for revocation; bulk revocation by agent is available via API and MCP. As non-human identities become a primary attack surface in enterprise AI deployments, Arca provides the credential hygiene your security team requires.