AI discovery and governance
Aletheon discovers the AI tools in use on your endpoints and in the browser, keeps a continuously updated inventory and rates the risk of each one. Coming soon: blocking personal data in prompts before it is submitted.
Book a demo: aletheon.io/demo
Supports compliance with NIS2, DORA, GDPR and the EU AI Act
Available as an EU-hosted cloud service or on-premises.
Solution
Bring shadow AI under control
See which AI tools are in use across your organisation and the risk each one carries.
Data protection in prompts
Detects and blocks personal data pasted into a prompt, before it is submitted.
Use cases
Aletheon Discover already covers all of these, using telemetry from your endpoints and browsers.
AI desktop applications and web services, browser extensions, coding assistants, CLI agents and local LLMs on macOS, Windows and Linux endpoints, and in Chrome.
Lists the configured MCP servers and flags those that can execute commands on the endpoint. Only the command name is collected, not its arguments or environment variables.
Alerts you when a local model server (such as Ollama or LM Studio) listens on all network interfaces, making it reachable from any host on the network.
Flags AI API keys stored in known locations. Only their presence is detected: the key value is not read or transmitted.
Compares installed AI applications and SDKs with the latest release and flags outdated versions.
Record whether each tool is approved, tolerated or prohibited. You are alerted to new tools, and every action is traceable in the audit log.
Only AI-related data leaves the endpoint, and each customer’s data is stored in isolation, in the EU.
How it works
A one-line command or an installer package for macOS, Windows and Linux, plus a Chrome extension. Both can be rolled out through your MDM or browser policy.
The agent and the extension report hourly. First results typically appear within 15–30 minutes of installation.
Review the risk of each tool and set its status. You are alerted to new tools, and the audit log records who decided what, and when.
The screenshots show fictitious data of a sample organisation (Demo Kft.) in the Hungarian interface.
Compliance
These frameworks expect you to know which technologies are in use, assess their risks, document your decisions and keep an audit trail. For AI tools, Aletheon keeps all of this in one place, continuously updated. It supports compliance, but it is not a certification and does not replace legal advice.
FAQ
Only AI-related records. Filtering happens on the endpoint, and the server validates every incoming record again: anything unrelated to AI is discarded before it is stored. API key values, MCP arguments and environment variables are not collected.
No. Detection runs locally in the browser, and prompt content is not sent to Aletheon’s servers. Guard is currently in development; we can discuss rollout timing for your organisation during the demo.
A one-line command (macOS, Linux) or an installer package (Windows MSI, macOS pkg, deb, rpm). Packages can be distributed through MDM, and the Chrome extension can be force-installed by policy. First results typically appear within 15–30 minutes.
Yes. Aletheon is available as an EU-hosted cloud service and on-premises. We discuss on-premises terms and timelines during the demo.
No. It provides the inventory, risk classification, decision records and audit log that support your obligations under NIS2, DORA, GDPR and the EU AI Act. Whether your organisation is compliant remains for you and your legal advisers to determine.
Aletheon Cloud is hosted in the EU. Each customer’s data is kept in a separate tenant, isolated at the database level, and no other customer can access it.
We will walk you through Aletheon using a sample organisation’s data and discuss how it would fit your environment.
We will contact you within 1–2 business days to schedule the demo. A confirmation has been sent to the address you provided; if you cannot find it, please check your spam folder.
