---
url: https://chaoslabs.xyz/cortex/security
title: "Cortex Security: See AI use. Prove what happened."
description: "See AI use across approved and observed paths. Stop unsafe data and actions on controlled paths. Prove what happened."
crawled_at: 2026-10-18T16:34:29Z
ask: https://chaoslabs-xyz.ora.run/ask
docs: https://chaoslabs-xyz.ora.run/docs
lang: en
---
Cortex

[Security Protect & Align](https://chaoslabs.xyz/cortex/products)

# See AI use. Prove what happened.

Discover. Control. Align and respond.

Observed Policy Action

Discover → Control → Align & Respond

## One journey. Three jobs. — 01 / Discover

### [Shadow AI Discovery](https://chaoslabs.xyz/cortex/shadow-ai)

What exists, who uses it, and what data moves?

02 / Control

### [AI Firewall](https://chaoslabs.xyz/cortex/agent-security)

What is inspected, redacted, blocked, steered, or held for review?

03 / Align & Respond

### [Oracle Sentinel](https://chaoslabs.xyz/cortex/oracle-sentinel)

Is the agent within mandate, what changed the verdict, and who owns the response?

Where the sensor looks

## AI is in the tools people already use.

Cortex finds sanctioned and shadow AI on supported capture paths: device, browser, IDE, SaaS, and MCP. Coverage is named, not assumed.

### Endpoint

Chat, coding agents, local tools

### SaaS

Support, knowledge, and ops work

### Code

PRs, agents, and review loops

### Cloud

Hosted models and MCP

One event

## One incident through Discover, Control, Investigate.

A sanctioned MCP read is denied on a Cortex-controlled path. The same payload is pasted into an unsanctioned ChatGPT tab and is observed only.

Discover · INC-SYNTH-01 · Inventory and exposure · Requester · ACME-SUPPORT-01 · Surface · Chrome · unsanctioned tab · Model · ChatGPT · Data class · pii.ssn · Control · INC-SYNTH-01

Decision on a managed hop

Requester · ACME-SUPPORT-01 · Surface

Cursor MCP · approved client book

Data class · pii.ssn · Destination · MCP client-book read · Investigate · INC-SYNTH-01

Record the officer can defend

Incident · INC-SYNTH-01 · Requester

ACME-SUPPORT-01 · Support · triage-helper

Surface · Chrome · unsanctioned tab · Data class · pii.ssn · SSN •••-••-0000 · Deployment, lineage & assurance

## One security program. Every session accounted for.

Run one evidence program across endpoints, cloud workloads, and self-hosted environments, with the deployment record and assurance posture in the same view.

- Which person or agent initiated the session

- Which surface, destination, and data class were involved

- Whether Cortex discovered, controlled, or investigated the event

Deploy where the session runs

Human-operated AI

Browser and desktop tools people already use. ChatGPT, Claude, Grok, Cursor, and the rest of the consumer surface.

On-device sensor

Cloud workloads

Hosted agents, provider APIs, and MCP paths: Slack agents, OpenAI, Gemini, GitHub.

Your cloud

Self-hosted

Run capture in your VPC or on-prem. Same inventory, same data classes, inside your boundary.

Your VPC or on-prem

Assurance carried with the evidence

SOC 2 Type II Compliant Chaos Labs is SOC 2 Type II compliant. Monitored by Vanta.

ISO 27001 Compliant ISO/IEC 27001 information security management.

- [NIST AI RMF Aligned Cortex is aligned to the NIST AI Risk Management Framework. Map and Measure start with which AI systems are in use and what data left the organization.](https://www.nist.gov/itl/ai-risk-management-framework)

- [ISO/IEC 42001 Aligned Cortex is aligned to ISO/IEC 42001. A review of the AI management system asks for inventory of systems, data used, and third-party models.](https://www.iso.org/standard/81230.html)

## Review your AI exposure.

Discover. Control. Align and respond.

Cortex by Chaos Labs

Keep the intelligence your company creates.

Atlas

### Atlas

Workforce Visibility · Work & Attribution · Foundry

### Foundry

Routing & Enrichment · Model Tuning · Security

### Security

AI Firewall · Oracle Sentinel · Solutions

### Solutions

[CISO / Security & Governance](https://chaoslabs.xyz/cortex/solution-ciso)

CFO / FinOps · [CTO / VP R&D](https://chaoslabs.xyz/cortex/solution-cto) · CEO

[People / CHRO / L&D](https://chaoslabs.xyz/cortex/solution-people)

Platform

### Platform

Architecture · Semantic Model · [Docs](https://docs.chaoslabs.xyz/cortex) · Company

### Company

Chaos Labs · Testimonials · Legal

© 2026 Chaos Labs. All rights reserved.