OpenAI is already in your products, your code and your people’s browsers. Cranium ONE shows you where, inspects what’s being sent, and enforces your policy before a prompt becomes an incident.
CodeSensor records the OpenAI models your repositories call — in Python, TypeScript, Java, Go, C# and more, including the OpenAI .NET SDK and Azure OpenAI client. AgentSensor maps systems built on the OpenAI Agents SDK, down to their tools and MCP servers.
Connect your SIEM and Shadow AI shows which AI services are in use across the company, who is using them and how much data is moving through them. Guardian adds the prompt-level view for the apps you build.
A profile sets which signals matter for each use case — sensitive data, secrets, jailbreaks, prompt leaking, goal hijacking — and whether each one is blocked, modified or passed.
In Enforce mode Guardian sits between your application and OpenAI, acting on every prompt and response in line. Listen mode lets you watch first, with no change to the request path.
Trace explains every verdict, AI Cards package the record for customers and auditors, and BOMs export to CycloneDX and SPDX.
Cranium ONE works with the stack you already run. Your policy stays yours — we make it enforceable.
In Guardian, add an OpenAI model with its project ID, API key and organization ID.
Send an application’s traffic through Guardian in Listen mode and watch real sessions arrive.
Validate the profile with Cannon, then flip it to Enforce for in-line control.
An OpenAI project ID, an API key and your organization ID. You add them when you create the model in Guardian, and the connection is scoped to that project.
Yes. With your SIEM connected, Shadow AI shows which AI services are in use across your organization, who is using them and how much data is moving through them.
Yes. AgentSensor detects agentic frameworks in your repositories, including OpenAI Agents, and lists each agent with its model, instructions, tools, handoffs, guardrails and MCP servers in the AI Bill of Materials.
Not in Listen mode, which evaluates a copy of the traffic in parallel. In Enforce mode Guardian runs in line so it can block, modify or pass prompts and responses according to your profile.
We use essential cookies to run this site, and — only with your permission — analytics and marketing cookies to improve it. You're the hero here; you stay in control. Privacy Policy.
Amazon Bedrock
Anthropic Claude
Microsoft Azure