Software built
to a security
standard.

MagicHub is an identity and user-data platform for product teams. Each project gets its own authentication surface — magic links, passkeys, and password sign-in with the policies you set — plus a visual schema builder for the user profile behind it. Schema changes move through draft, review, and publish with breaking-change detection instead of hand-written migrations, and every project is pinned at creation to an EU, US, or AP data plane it never leaves.

Sectora covers the whole application lifecycle rather than a single scanner. Static, dependency, and dynamic analysis run against the same asset inventory as secrets scanning, attack-surface discovery, and supply-chain checks, and findings are correlated against a vulnerability index built from NVD, GHSA, OSV, KEV, and EPSS. What the scans learn then feeds enforcement — an edge WAF, a CI/CD gate, and a managed browser agent — and exports as framework-mapped evidence into SIEM and ticketing.

CompliOne runs the whole governance function, not one regulation. A shared control library maps across GDPR, CCPA/CPRA, LGPD, PIPEDA, POPIA, Israel’s Amendment 13, ISO 27001, 27701, 42001, 22301 and 9001, SOC 2, HIPAA, DORA, NIS2, TISAX, PCI DSS, NIST CSF, and GxP, so one piece of evidence satisfies every framework it touches. Around it sit risk, vendor, audit, asset, workforce, incident, and privacy operations — and an agency mode for firms running all of it on behalf of clients, with white-labelled portals, vCISO workplans, board reports, and a retrieval-backed GRC agent that answers from your own evidence base.

VeraID issues identity and governs it. It runs as a standards-compliant provider — OpenID Connect, SAML, SCIM, passkeys, MFA, and conditional access, with an app portal and an access gateway — while discovering the service accounts, API keys, and AI agents no directory owns. Both halves share one policy engine, one audit trail, and one risk score, and export to Splunk, Slack, Teams, PagerDuty, and Jira.

CloudVera is the operations plane for AI and serverless workloads. A gateway fronts eleven model providers with virtual keys, budgets, routing, and cost controls; guardrails inspect every prompt and completion; and traces, replays, and live tail follow requests across Cloudflare Workers, Vercel, and AWS Lambda. Its prompt-injection detector is a fine-tuned classifier trained in house, not a third-party API call.

Kordox is one operations workspace for people running several ventures at once. Tasks, deals, leads, documents, tickets, and email live in a single system that adapts per project through user-defined objects and schemas rather than hardcoded modules — and it carries the client-facing half too: portals, booking pages, invoices, and signature requests, on your own sending domains.

Soltik is a social platform built around shared browsing. A companion extension turns any page into a place people can talk, annotate, and watch together; the web platform behind it gives creators community hubs, a site builder on their own domain, storefronts, courses, podcasts, and live video — replacing the link-in-bio, membership, newsletter, and community tools they would otherwise stitch together.