One line, ten minutes.

Read-only scan, fourteen days, no credit card.

Get a trial license at trial.html. Run one of the commands below. CONDUCTOR validates the license, probes for Reader / SecurityAudit / roles/viewer permissions, and runs the first scan.

Same install, signed prod license.

After signing the contract you receive a TITAN-PROD license key. The same command line works; you swap --mode=trial for --mode=prod and add --auto-fix --auto-approve if you want consent-gated remediation enabled by default.

Pick your tier. Download. Run.

Each bundle is signed for a specific tier and customer. CONDUCTOR enforces the license at the kernel; only the agents your tier entitles ever spawn. Bundles ship a Linux installer (install-offline.sh) and a Windows installer (install-offline.ps1) side-by-side — same evidence, same dashboard, same fix flow.

Three permission paths.

• 01
  Trial license · read-onlyReader / SecurityAudit / roles/viewer only. CONDUCTOR refuses to spawn FORGE. Your environment is never written to.
• 02
  Audit tiers · read-onlySame as trial: Reader / SecurityAudit / roles/viewer. AUDIT runs in observe mode and emits per-control evidence packs without write access.
• 03
  Fix tiers · read + consent-gated writeContributor / PowerUserAccess / roles/editor. FORGE is spawned. Every fix is gated by a per-finding [y/N] consent prompt.

Snowflake security audit, ten minutes.

LATTICE is the data-warehouse security agent. Sold a la carte or as a bundle add-on. Contact sales for pricing. Runs read-only against SNOWFLAKE.ACCOUNT_USAGE plus real-time INFORMATION_SCHEMA / SHOW probes. Two connection modes are documented below; pick whichever matches your network policy.

• 01
  Free Snowflake trial signup (5 min)Visit signup.snowflake.com. Pick the Enterprise edition on Azure East US 2. The free trial includes Custom of credit and lasts 30 days. After signup, your account locator looks like ABC12345-XY99000.
• 02
  Create a read-only audit role (run as ACCOUNTADMIN)In a Snowflake Worksheet:
  CREATE ROLE IF NOT EXISTS TITAN_AUDIT_RO; GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE TITAN_AUDIT_RO; GRANT MONITOR USAGE ON ACCOUNT TO ROLE TITAN_AUDIT_RO; CREATE USER IF NOT EXISTS titan_audit_svc PASSWORD='<set one>' DEFAULT_ROLE=TITAN_AUDIT_RO; GRANT ROLE TITAN_AUDIT_RO TO USER titan_audit_svc;
• 03
  Native connector (preferred)Bash / PowerShell:
  pip install snowflake-connector-python
$env:SNOWFLAKE_ACCOUNT = "ABC12345-XY99000"
$env:SNOWFLAKE_USER = "titan_audit_svc"
$env:SNOWFLAKE_PASSWORD = "<your password>"
python agents\snowflake_lattice.py --account-label "your-account"
• 04
  Generic SQL API mode (no third-party connector)If your network policy blocks snowflake-connector-python, run the same scan over the public Snowflake SQL API with key-pair JWT or OAuth. Stdlib only.
  $env:SNOWFLAKE_PRIVATE_KEY_PATH = "C:\path\to\rsa_key.p8"
$env:SNOWFLAKE_PUBLIC_KEY_FP = "<public key fingerprint>"
python agents\snowflake_lattice.py --mode api --account-label "your-account"
• 05
  What you get within ten minutes33 detectors run (27 against ACCOUNT_USAGE plus 6 real-time INFORMATION_SCHEMA / SHOW including continuous Unity Catalog drift sweep). Evidence pack emitted in HTML, JSON, Markdown, PDF, and DOCX under reports/snowflake-live/. Every finding carries a five-step remediation playbook with the exact ALTER USER, REVOKE, CREATE MASKING POLICY, or ALTER ACCOUNT SQL to apply the fix.