If your question is not below, write to info@titanaisec.com and we send a written answer within one business day. The eight categories below cover the questions buyers ask most often.
How long does install take? Bash or PowerShell, one line. Read-only deploy completes within ten minutes against a single cloud subscription. The license server validates the token, CONDUCTOR probes for Reader / SecurityAudit permissions, and the first scan starts.
Do I have to install agents on every VM? No. TITAN AI runs against your cloud control plane (Azure Resource Graph, Azure RBAC, Entra ID) and your platform APIs. Workload-level agents only land if you opt into SCANNER (IDS/IPS) or LEGACY (EOL host coverage).
Will TITAN AI ever write to my environment without my consent? No. Trial and audit-only licenses ask for read-only roles only and FORGE is not spawned. Fix agents ask for Contributor / PowerUserAccess, but every fix is gated by a per-finding [y/N] consent prompt.
Is the price negotiable? The first five customers per vertical are eligible for the Founding Customer program with preferred terms in exchange for a reference call after ninety days. Multi-year contracts receive additional discounts. Contact sales for details.
How do I buy? Every one of the 45 agents is licensed on its own. There are no bundles: pick the agents your environment needs, add more later under the same dashboard, and we quote the price per deal. The reliability stack (CONDUCTOR, REASON, PHOENIX, DR-GUARD) comes free with any agent and AIRLOCK air-gapped deployment is available with any agent.
Why do prices differ between agents? Each agent is priced on the depth of its detection logic and the incumbent tool it replaces; the agents that read an application directly, or that carry a full assessment methodology such as CMMC 2.0, replace far more expensive tooling than a posture agent and are priced accordingly. Ask for the written quote.
Are you SOC 2 certified? Not yet. Our SOC 2 Type II observation period begins at first paying customer; the report is targeted for Q1 2027 covering the prior six-month window. We will not list a certification we do not hold.
Do you sign a HIPAA BAA? Yes. Our BAA template covers the Security Rule technical safeguards, the breach-notification process, and the subcontractor BAA chain. Available at contract signing for any Healthcare customer.
Is the patent a credential? No. USPTO 19/645,524 is a filing receipt; we list it for traceability, not as a moat. The actual moat is the code, the live-proof evidence, and the customer references we accumulate over time.
What do the Healthcare agents cover? HIPAA Security Rule controls, HITRUST CSF v11 mapping, PHI exfiltration monitoring, ePHI access alerts with break-glass workflow, BAA templates, and clinician-readable quarterly reports. custom pricing.
What is AIRLOCK? The deployment mode that runs the full agent fleet without any outbound internet calls. Local LLM (Ollama) for reasoning. Pre-activated license. Evidence export through a one-way diode or USB. Available with any agent, quoted per deal.
When do I need AIRLOCK? FedRAMP High, CMMC Level 2, classified networks, DMZ networks, hospital secure enclaves, and air-gapped factory networks. Anywhere outbound API calls are not allowed.
What is TITAN AUDIT? A standalone compliance evidence collector that emits per-control PDF and DOCX evidence across nine frameworks (SOC 2, HIPAA, HITRUST, PCI, ISO 27001, NIST, FedRAMP, CMMC, DORA). Custom pricing. Sold a la carte. Contact sales for details.
How is this different from Vanta and Drata? Vanta and Drata collect evidence as pass / fail. TITAN AUDIT emits the underlying configuration as visual proof, with cross-mapped controls and the audit-document format auditors actually accept. Plus the prioritization, MITRE ATT&CK mapping, and consent-gated remediation playbooks Vanta does not ship.
Where does the data live? Findings render to your storage. We do not copy customer data into TITAN AI infrastructure. License-enforcement metadata is stored in the Cloudflare Workers KV in our control plane.
Can you support EU customers? Yes. GDPR DPA available. Sub-processor list published. SCCs as the primary data-transfer mechanism today, BCRs roadmapped.
Do you support customers outside the US and EU? Yes; we have run pilots in Canada, the UK, the UAE, and Singapore. ME / APAC support is currently US-hours only; we add regional time-zone coverage on request.
What is the founding-customer offer? Twenty-five total spots: five per vertical (Cloud, Healthcare, Government, Pipelines, Data). 20% off Year 1, list price Year 2 onward, direct Founder access, roadmap influence, in exchange for a reference call after ninety days.
Who is eligible? Any company that signs an annual contract for any paid TITAN agent within the founding cohort window. We close the cohort once five spots are claimed in each vertical.
Read-only scan. No credit card. Full evidence pack on every finding.