Governance when proof and process have to travel with the work.

Enterprise is how security and platform buyers run Optics, Gate, and Phantom Engine on infrastructure they already own — with ledger, evidence, and dual-control when leadership asks what happened. Customer-hosted today.

Product behavior for host Control lives on Phantom Engine. Formal certifications are a separate program — see Compliance.

Talk to sales Phantom Engine product

Live · host under protection

phantom · runtime control · protected hostIdle

[ ∅ PHANTOM ENGINE ] runtime control · host path
  Mission Control · phantom offline

  host:  awaiting rogue path
  → BLOCKED · no app-layer record

[ ∅ PHANTOM ENGINE ] Summary
  rogue stopped: 0
  gate blocked:  0
  proof:         retained for humans

Already on the wrap

Model APIs and runtimes we actually cover.

Optics records egress telemetry to these model APIs without keeping the conversation. Gate can block a destination, redact PII, or enforce a spend limit on the wrap. Phantom Engine is runtime enforcement on Linux you enroll.

Model APIs

OpenAI, including regional endpoints
Anthropic
Google Gemini
Google Vertex AI
Amazon Bedrock
Azure OpenAI
Azure AI
Cohere
Mistral
Groq
Together AI
Perplexity
xAI
DeepSeek
Fireworks
OpenRouter
Cerebras
Voyage AI
SambaNova
DeepInfra
Hugging Face Inference
Replicate
Ollama
NVIDIA NIM (hosted)

Agent runtimes

Node fetch
undici.fetch
undici.request
undici.stream
Node http/https
Node http2
Node net/tls
Node WebSocket
Node-spawned curl/wget
Python urllib (vantio run / shield())
Python http.client (vantio run / shield())
Python requests (vantio run / shield())
Python httpx (vantio run / shield())
Python aiohttp (vantio run / shield())
Python urllib3 (vantio run / shield())
Python sockets (vantio run / shield())
Python-spawned curl/wget (vantio run / shield())

Hosts you own

Linux

Buyer outcomes

Release stronger autonomous agents without handing over the keys. You get a record of which hosts they reached, decisions on the wrap they already run, and a stop on Linux you enroll when a process tries to skip both.

Operational control you can staff

Observe-only first, then scoped enforce on the workloads you choose. Security and platform teams keep a clear posture story without watching every agent session.

Evidence for risk and audit conversations

Continuous Assurance detects drift, heals what it can, checks posture, and exports evidence while production agents keep working. Depth grows with the product you bought.

Honest readiness boundaries

On-prem and VPC are Present. Stopping a process on a blocked action stays human-approved and off by default. Framework certifications are not held and are never sold as included.

Suite map

Optics observes. Gate enforces. Phantom Engine protects machines you enroll. Enterprise adds governance when proof has to travel with the work.

Talk through Enterprise for your environment.

If you are ready to run the suite on your own infrastructure, we will walk where Phantom Engine deploys, what evidence you get, and what that looks like on your nodes.

Talk to sales See pricing