Enterprise
One product, from a single cluster to the whole fleet
Praxis is a commercial product. It covers one cluster and a whole fleet alike, and adds what a team needs to run it with several users, under audit.
| Capability | Praxis EnterpriseCommercial license |
|---|---|
| Analysis and output | |
| Read-only collector, canonical control model, deterministic scoring | Included |
| CNAPP adaptersREST-API and Kubernetes-native policy patterns | Included |
| Single-cluster dashboard and deploy-plan generationGenerate-only, never applied | Included |
| AI rationaleLocal model, your own endpoint, or none | Included |
| Docker image, Helm chart, air-gapped install | Included |
| Operating at scale | |
| Multi-cluster fleet viewPer-cluster posture and a cross-cluster rollup | Included |
| Multi-tenant for MSSPsTenants, a tenant selector, customer-scoped users | Included |
| Multi-user access with mandatory MFAUser, Admin and System admin roles; invitations; lockout | Included |
| Run history and driftNew, applied, reverted or no longer reported; 400 days of daily history | Included |
| Governance | |
| Compliance evidence reportsPCI-DSS, ISO 27001, BDDK and KVKK as PDF, HTML, CSV or JSON | Included |
| Signed audit packagesOne ZIP per scope and period, verifiable offline | Included |
| Tamper-evident audit logSign-ins, views, exports and changes, hash-chained | Included |
| SIEM exportSyslog (UDP, TCP, TLS) and a generic JSON webhook | Included |
| License and support | |
| License | Commercial |
| Support | Contracted support |
| Planned for Enterprise | |
| Single sign-on (OIDC, SAML) | Planned |
| ITSM ticketing | Planned |
| Vendor-specific SIEM connectorsThe generic export above works today | Planned |
Enterprise features are covered by automated tests and have been run against real findings from test clusters. Integrations that need a customer’s own environment to prove, such as an identity provider or a ticketing system, stay marked Planned until they have been tried there. Terms are agreed per customer.
See your own clusters ranked
Bring one cluster. We run the read-only collector with you and walk through the list it produces.