Security and trust
A security product should be the safest thing you run.
Cognilox sits in front of your most important systems, so we built it to be trusted there: it keeps to your walls, keeps out of your data, and never quietly lowers its guard.
Signed decision record
Record intact- 09:14:02Code review: Commit to a feature branchAllowed
- 09:14:37Replies: Reply to a customerFixed
- 09:15:10Clean-up: Delete rows with no filterHeld for approval
- 09:16:48Test fixer: Run a downloaded scriptBlocked
- 09:17:05Clean-up: Same delete, approved by two peopleAllowed
Press edit on any entry. The record shows exactly where it was changed. It holds the decision, never the content of what the agent said.
- 0of your data sent to Aptibit when you host it
- 0hidden rules. Every rule is yours to read
- 0protections a lapsed licence can switch off
- 2business days to reply to a security report
Our promises
What we will never do.
Look at your data
When you run Cognilox yourself, none of your data comes to Aptibit. Not prompts, not replies, not records.
Keep a back door
Aptibit has no access to your installation by default. You decide who sees what.
Hide a rule
Every rule Cognilox applies is one your team can read and change. There are no hidden rules.
Switch protection off for a bill
A licence never changes what Cognilox enforces. If a licence lapses, you are told, and you stay protected.
Count your people
Cognilox counts agents, never employees. It is not a tool for watching staff, and it never will be.
Keep what it removes
Records hold the decision, not the content. A secret Cognilox removed is not sitting in a log.
How it protects itself
Hard to turn, even from the inside.
Controls apart from agents
The controls for stopping and releasing agents live apart from the agents, so a compromised agent cannot free itself.
Protections that stay
A rule change that would weaken a protection is refused before it takes effect, and every operator action is recorded.
Signed releases
Every release is signed, and you can check it is genuine before you install it, even offline.
A record that shows tampering
The decision record is signed so that a single changed entry shows exactly where it was changed.
Agents without real keys
Agents can work without ever holding your real keys, so a hijacked agent has nothing to leak.
Every protection tested by breaking it
We break each protection on purpose to prove our tests catch it, before it ships.
Responsible disclosure
Found something? Tell us.
If you believe you have found a security issue in Cognilox, email info@aptibit.com with the subject “Security”. Please do not share it publicly until we have fixed it.
- 1You email us the details
- 2We reply within two business days
- 3We agree a fix plan with you
Questions
About trust.
No. When you run Cognilox yourself, none of your data goes to Aptibit and we have no access to your installation unless you grant it.
The decisions it made, signed so any change is visible. It does not keep the content of what your agents said, or the secrets it removed.
Nothing changes in what Cognilox enforces. A licence problem is reported to you, and your protections stay on.
Email info@aptibit.com with the subject "Security". We reply within two business days and agree a fix plan with you.
See it stop an attack, live.
Thirty minutes, real agents, real attacks. We show you what Cognilox allows, fixes, holds and blocks, then talk through your own agents.