Sovereign software for automation, AI and security
Build governed operations on Nexus Platform, or deploy Atlas, Cerberus, Sentinel or Shield as a packaged security product. Every path runs inside the boundary you control.
What you can buy
Start with the platform for organisation-specific operations, or with a product for a defined security outcome.
1,480+
integration actions
46
event sources
8
language runtimes
On-prem
and air-gapped
Connectivity
Prebuilt where it exists. Programmable where it does not. Nexus reaches your systems in the order that keeps work fastest to build and easiest to govern.
Explore connectors01
Used first whenever one exists for the system and operation you need.
02
Used when the operation sits outside the prebuilt action set but the system exposes an approved interface.
03
Used for Kubernetes, infrastructure as code, cloud and host operations inside the same run.
04
Used for organisation-specific logic across eight supported code language families.
05
Used for bounded interpretation against self-hosted model endpoints where rules alone do not fit.
06
Used where policy requires named authority before a consequential system action.
07
Keeps every input, version, decision, action and outcome connected in one execution record.
Path one
Compose automation, enterprise integration, infrastructure operations and self-hosted AI into governed workflows your teams own. Low-code where it is faster, real code where it matters.
Path two
Atlas, Cerberus and Sentinel are complete products powered by Nexus. Deploy a defined security capability without a broad platform implementation, and extend later if you choose to.
Execution layer
Most operations fail between tools. Nexus runs the whole path, from the triggering event to the audit record, with every step observable, reversible and attributable.
Event, schedule, API call or queue message
Prebuilt connector action reads the record
Deterministic rules, enrichment and calculation in the language your team chooses
Private model and retrieval produce a recommendation
Reviewer confirms, edits or rejects
Systems updated, services invoked
Inputs, decision, reviewer and outcome recorded
Single run
One governed execution, not seven disconnected tools handing work to each other.
A run, end to end
01
An invoice lands in a monitored folder, or a webhook announces it. One of 46 event sources starts the run.
02
Connector actions read the purchase order from SAP and the account record from Salesforce, using RFC and API interfaces already built.
03
A Python node parses the attached spreadsheet, normalizes line items and applies tolerance rules that are verifiable, not probabilistic.
04
A self-hosted model classifies the document and extracts the fields the rules could not read. No request leaves the boundary.
05
Anything outside tolerance pauses at an approval node, where a named reviewer sees the assembled evidence and approves, corrects or rejects.
06
The confirmed values post to the ERP through the same connector layer, so the system of record reflects the decision that was actually made.
07
The validation logic is published as a Function other workflows and internal services call, rather than being copied.
08
Inputs, node results, model output, reviewer and outcome are retained together. Credentials come from a vault, never from the workflow body.
The same run is deployable in an air-gapped environment, because every component it depends on runs inside your infrastructure.
Follow the full walkthroughPositioning
Run the control plane, runtimes, models and data inside your own boundary, whether on-premises, in a private or sovereign cloud, or fully air-gapped.
Integration, code, infrastructure actions, AI reasoning, human approval and system write-back happen in one governed run.
1,480+ connector actions and 46 trigger sources, with eight runtime language families when a step needs real code: Python for data and document processing, PowerShell for Microsoft operations, Bash for systems work, Java and .NET for enterprise libraries, Go for efficient utilities and services, and JavaScript or TypeScript for API-oriented logic.
Reviewed decisions become reusable knowledge: better rules, prompts, retrieval and evaluation grounded in how your organization actually works.
Institutional intelligence
Nexus captures the reasoning around real operational decisions and feeds it back into the system that made them. Human feedback improves consistency and relevance over time; it does not guarantee perfect AI output, which is why review stays under your control.
Policy and validation run first, and remain verifiable.
A self-hosted model proposes an action with its evidence.
A named reviewer confirms, edits or rejects.
Inputs, reasoning, reviewer and outcome are recorded.
Rules, prompts, retrieval, evaluation sets or approved fine-tuning are updated.
Packaged products
External attack-surface management
Maps the estate reachable from outside your perimeter, validates exposures with non-destructive checks, applies self-hosted AI analysis and issues a signed dossier your teams and auditors can verify.
AI application security
Registers the AI endpoints running across the estate, red-teams them against the OWASP LLM Top 10 mapped to MITRE ATLAS, scans the model supply chain with AI-BOM and issues signed reporting.
Sovereign SIEM and SOAR
Detection, investigation and automated response operated entirely inside your environment, with your own retention, your own models and full custody of security telemetry.
Self-hosted application and API protection for teams that need WAF and API defenses running inside their own infrastructure.
Who it is for
Deliver digital services and security operations without exporting data, models or evidence to environments outside your jurisdiction.
Consolidate overlapping automation, integration and security tooling into one execution layer your architects and auditors can reason about.
Sovereign deployment
Nexus is Kubernetes-agnostic and deploys where your governance requires it, including networks with no external connectivity. Models and data stay under customer control.
Explore the trust centerYour own data centers and hardware.
Regional and jurisdictional control.
Kubernetes-agnostic deployment.
Full operation without external connectivity.
Not an on-premises connector to a cloud platform. A platform that runs inside your environment.
