Secure AI Communities
Built for Business
70+ features across 11 modules — federated entity IDs, post-quantum cryptography, SMB governance, agentic commerce, and real-time compliance — all in one ecosystem.
Production data · Updated every 5 minutes
11 Modules
The full ecosystem at a glance
Every module ships production-ready. Click any card to explore features and documentation.
Cryptographic entity IDs, inter-community peering, Knock invitations, sovereign data pods, and STIX 2.1 audit chain.
HybridSigner Ed25519+ML-DSA-65 and HybridKEM X25519+ML-KEM-768. Enterprise-grade FIPS 204/203 compliance.
Versioned community charter, Z-score behavioral anomaly detection, intelligence reports, OAuth agent discovery.
Eight-module governance toolkit: vendor DPA tracking, cost allocation, budget dashboard, incident register, supplier risk, prompt library, training records, suite wizard.
Multi-vault connectors (AWS SM, Azure KV, HashiCorp, GCP SM), SQLite inventory, policy engine, lifecycle rotation alerts.
Auto-scan notes on modify, data class inference, SEP share with UECIID provenance, XAI pipeline sidebar, offline queue.
Eight analytics functions, OLS trend predictions, community benchmarking, 15-min SQLite cache, PDF report builder.
Nine built-in BI models, deterministic SQL generator, self-service tenant catalog, Redis query cache, AI query endpoint.
UCP/AP2/MCP procurement protocols, multi-agent auction, FIDO2 passkeys, Web3 mandate contract, Commerce Budget Guardian.
MarkItDown converter with SHA-256 Redis cache, data class inference, 50 MB gate, community doc-converter endpoint.
19 controls across GDPR/SOC2/ISO27001/HIPAA, real-time gap manager, WebSocket push, SOVA remediation tools.
Architecture
How the modules connect
Click any node to jump to that module's detail section.
35 Features
Find any feature instantly
Community & Collaboration 19 features
Snowflake→base-62 entity IDs (SEP-{11 chars}). Cryptographically-unique, sortable, collision-free.
Three sharing modes: MIRROR_ONLY, REWRAP_ALLOWED, FULL_SYNC. HMAC-SHA256 handshake. Duplicate guard.
72-hour Redis-backed one-time invitation tokens. Invitee identity verified before member enrollment.
5-badge system: NEWCOMER → TRUSTED → CONTRIBUTOR → EXPERT → ELITE. Anonymised leaderboard (GDPR-safe).
Versioned community charters (DRAFT→ACTIVE→SUPERSEDED). Member acceptance tracking. Compliance scoring.
Z-score anomaly scoring. NORMAL/ELEVATED/CRITICAL thresholds. 30-day rolling baseline. SQLite event store.
14-provider OAuth catalog. Scope-based risk scoring. ALLOW/MONITOR/BLOCK verdicts. Redis-backed policy.
Weighted risk score: 40% transfer rejection + 35% anomaly + 25% governance gap. SAFE→CRITICAL labels.
SHA-256 prev_hash chain per community. Genesis block. OASIS STIX JSONL export for SIEM ingestion.
STIX 2.1-linked AI incident journal. Severity: LOW/MEDIUM/HIGH/CRITICAL. Auto-log from filter BLOCK events. Status transitions: open→investigating→resolved→closed. Every incident appended to STIX audit chain.
5-criteria composite scoring: data access, AI capability, compliance posture, peering history, disclosure recency. Risk labels: LOW/MEDIUM/HIGH/CRITICAL. Derived from sep_transfers velocity — no external API calls.
UECIID provenance on every prompt. Injection screening via POST /filter before save. Versioning, community sharing via Causal Transfer Guard. 6 endpoints at /prompt-library/*.
HMAC-SHA256 attested completion records (VAULT_MASTER_KEY). Expiry tracking, compliance report. Behavioral anomaly hook on ai_training_completed. 5 endpoints at /training/*.
Secure AI-driven procurement with mandate controls, vendor validation, and BI analytics. UCP store discovery, AP2 signed spending mandates, MCP agent intent bridge, Vendor Governance integration, Cost Allocation recording, STIX audit chain per order.
SmartContract mandate deployment via eth_tester/Sepolia. IPFS metadata storage. Immutable on-chain audit trail for AI spending.
Parallel vendor proposals from 3 AI providers. Supplier risk scoring. Winner selection by composite score.
EU VAT OSS, US Sales Tax (50 states), UK VAT, SG GST, AU GST. PDF invoices via ReportLab stored in MinIO.
WebAuthn Passkey registration and authentication. Optional FIDO gate on mandate execution. Phishing-resistant.
pip install shadow-warden-sdk. ShadowWardenClient + SecureAgent mixin. Any AI agent gets mandate controls in 3 lines.
Integrations 14 features
Auto-scan notes on save. Share via SEP UECIID. XAI pipeline visualization. Offline publish queue. Sidebar view.
Slash command handler with HMAC-SHA256 verification. HIGH/BLOCK + share alerts via webhook.
Duck-typed WardenCallback for seamless LangChain pipeline integration. Zero config change required.
Splunk HEC + Elastic ECS format. Custom field mappings. SOC 2 Type II evidence ingestion.
Test matrix (3.11/3.12) + lint + Docker smoke + mutation testing. Coverage gate ≥75%.
5 commands (Ctrl+Shift+W scan selection, scan file concurrent, scan clipboard, clear, settings). 4 decoration tiers (LOW/MEDIUM/HIGH/BLOCK) with coloured gutter, background tint, and inline after-text verdict. Code Lens above HIGH/BLOCK lines. Concurrent file scan (configurable 1–16 workers). Rich hover: flags + secrets found + request ID. Output channel log. Auto-scan on save. v5.2.0.
Automatically scan every commit message and diff for secrets, injection patterns, and policy violations before code is merged, using a Shadow Warden GitHub Actions workflow.
Automatically create Jira issues for HIGH/BLOCK verdicts with full XAI causal chain and remediation guidance embedded directly in the ticket.
Bring Shadow Warden into Microsoft Teams with a /warden slash command that scans text, shows verdicts, and lets teams respond to security incidents without leaving the conversation.
Automatically scan Notion pages for secrets, injection patterns, and policy violations, then write risk verdicts back as page properties for easy triage.
Consume threat intelligence from any TAXII 2.1 server, automatically ingesting STIX indicators and observables into Shadow Warden's detection pipeline for enhanced threat correlation.
WardenSpanProcessor (sync ThreadPoolExecutor) + WardenAsyncSpanProcessor (asyncio tasks). Extracts span name, string/numeric attributes, event messages — forwarded to /filter. Bounded queue (max 512), shutdown drain, force_flush(), on_finding callback, configurable min_risk + skip_span_names. REST: GET /sdk/status, GET /sdk/stats, POST /sdk/ping. Tier: Pro+.
Bridge MISP's ZMQ event feed directly into Shadow Warden's syslog sink. ZMQ subscriber (pyzmq, multipart frame support) + HTTP pull fallback. Domain IoCs forwarded as dnsmasq-style syslog lines to UDP 5514 for real-time correlation with passive DNS telemetry. Stats at GET /misp/stats. One-shot sync via POST /misp/sync. Auto-starts in lifespan when MISP_ZMQ_URL or MISP_API_URL+KEY is set.
Single-wizard provisioning of all 7 SMB modules. SMBProvisionResult with UECIID + STIX chain ID. get_suite_health() aggregates all module stats. 3 endpoints at /smb-suite/*. Streamlit 6-tab dashboard at page 10.
Business Intelligence 1 features
8-category analytics: AI usage, threats, vendor scorecards, cost optimisation, compliance scoring, community benchmarking, predictive incident analytics, custom report builder. SQLite-cached 15min TTL. FastAPI router at /business-intelligence.
Agentic Commerce 1 features
Full seller-side architecture for AI agents to trade autonomously. Dynamic pricing, Redis reservations, AP2 payments, STIX audit, budget guardian integration.
Activity
Community growth
New members, SEP transfers, and incidents — last 6 months.
Where to work with communities
Three interfaces — pick the one that fits your workflow.
Full community management — join, peer, share, manage members, configure governance.
Open PortalReal-time community activity, SEP transfer timeline, incident feed, compliance posture.
Open DashboardDeep-dive BI: 8-tab community intelligence, benchmark percentiles, predictive trend charts.
Open Analytics
Ready to join a secure
AI community?
Start free with Starter and upgrade when your community needs more members, SEP transfers, or advanced compliance controls.