Identity and authorization
Access follows your organization.
Use enterprise identity and permissions that reflect company, account, group, location and device relationships.
Federated
identity
OIDC-based enterprise identity, with federation options for Microsoft Entra, Google Workspace and LDAP/AD.
Scoped
authorization
Relationship-based access controls, granular roles and cascading permissions across the organizational hierarchy.
Managed sessions
and keys
Session expiry, multi-factor authentication and scoped API keys with rotation and revocation.
COMMAND|MONITOR
AGENT / INVESTIGATION
AI follows the evidence.
Working assessment
01
Query interface metrics
Evidence attached
02
Run active network checks
Results attached
03
Assess related events
Finding assembled
Operator direction
“Check the adjacent circuit.”
Data and credentials
Keep ownership attached to the data.
Tenant context travels through collection, processing, storage, workflows and APIs. Source credentials are encrypted and bound to their customer context.
Tenant boundaries
Customer-scoped routes, storage verification and isolated topology context support tenant separation.
Protected collection
mTLS client certificates authenticate collection sources. Syslog-over-TLS provides an encrypted log transport option.
Credential protection
Credentials are decrypted within the polling job and kept out of logs, API responses and shared state.
AI governance
Make the work inspectable.
Track every agent tool call with parameters, result and duration. Keep user and tenant memory scoped, and bound investigation execution.
Action audit trails
Review agent actions, alert decisions, topology changes and user activity.
Bounded execution
Iteration limits, workflow circuit breakers and token accounting support operational control.
Human oversight
Inspect evidence, add direction, cancel work and reopen findings with new context.
Architecture review
Evaluate the controls in your environment.
Request the applicable security documentation and review deployment-specific requirements with the CommandLink team.
Data handling
Confirm hosting region, retention, deletion requirements and the telemetry permitted for collection.
AI processing
Review the selected model routing, data handling and permitted tools for the intended deployment.
Assurance evidence
Request current assurance reports and security review materials. Validate their scope against the services in your proposal.
A few good questions
Get clear
on the details.
Does this page assert a specific certification?
How are AI actions reviewed?
Your next operational advantage
Put AI to work.
Leave the sprawl behind.
Bring your stack and a recent incident.
See what your team can simplify.