Phantom Engine
Stop what AI isn't allowed to do.
Phantom Engine is designed to enforce your rules in the Linux kernel, using eBPF and LSM. Allowed destinations pass. The lab proof does not yet cover child processes. The lab proof is kernel enforcement for enrolled workloads on Ubuntu 24.04 in GCP and AWS, and a clean uninstall.
- Allowed
- billing.internal.example
- Stopped
- 203.0.113.50
- Child process
- not yet in the lab proof
- Where
- kernel, this Linux system
- Proxy
- none
The spec
Use Phantom Engine on its own, or with Optics and Enterprise. Contact Vantio to put it on your servers.
Allowed destinations pass.
Allowed destinations pass. There is no proxy to route around, because the rule is in the kernel the proxy runs on.
Child processes are not in the lab proof yet.
The lab proof does not yet cover child processes.
Uninstall is clean.
The lab proof is kernel enforcement for enrolled workloads on Ubuntu 24.04 in GCP and AWS, and a clean uninstall.
The same rule, both fronts.
It doesn't matter whether the AI is yours and over-eager, or someone else's and malicious. The kernel applies the same rule.
What Phantom Engine is designed to stop
A destination that is not allowed. The lab proof does not yet cover child processes. The film on the home page walks the same stop. Watch it contain.
Who decides what's allowed? A person. That's Enterprise.