Open-source governance layer for autonomous AI agents

Use the intelligence. Keep your data.

Use AI agents with greater control over sensitive data and actions. Agents act only on what you permit, risky steps wait for a person, and every decision is traceable.

The shape of it

AI modelsexternal intelligencerequestsSuper Tankstrust layerpermitted actionsYOUR ENVIRONMENTYour systemsYour datacan be kept localIntelligence comes in.Sensitive data can be kept local.

The open questions

Agents are capable. Control is the hard part.

What can an agent reach?

What may it do?

Where does the data go?

What happened, and why?

The trust layer

One place where every request is decided.

AI AGENTSAgentreadsAgentactsAgentsummarisesAgentunapproved taskSuper Tankspolicy · loggingallowed onlyEVERY REQUEST IS EVALUATEDYOUR ENVIRONMENTApplicationsDocumentsRecords

Security model

Five principles.

Local by design

Super Tanks runs inside your own environment, so sensitive data can be kept local when using a local model, rather than being sent to a conventional cloud-first service.

Default deny

An agent action that has not been explicitly permitted is refused.

Explicit permissions

Agents can only perform actions that have been explicitly permitted.

Full traceability

Activity is logged, so you can see afterwards what an agent did and on what basis.

Human approval for risky actions

Risky actions can be stopped and held at GO-Gate until a person approves them.

How it works

Ask, check, act — keep the record.

1 · Agent asksa request2 · Checkis this permitted?Refuseddefault denyrisky3 · GO-Gatewaits for approvalapprovedpermitted4 · Action runswithin your systems5 · Loggedtraceable
More detail

Super Tanks runs locally rather than as a conventional cloud-first service. Its security model is default-deny: an agent can only perform actions that have been explicitly permitted, and activity is logged so decisions can be traced afterwards. Sensitive data can be kept local when using a local model. Risky actions can be held at GO-Gate until a person approves them.

Under the hood

Built in the open.

1,600+

automated tests

12

layers

Mapped against

  • STRIDE
  • OWASP Agentic Top 10
  • MITRE ATLAS

Open source

Design partner programme

Introduce AI agents — with us alongside.

Likely a fit if you

  • are planning to introduce AI agents
  • have open questions on data security and governance
  • need control over how agents reach sensitive information