Two-step sign-in, for everyone
Require it for every role, with a grace period, from one rule.
Security
Security for on-premise AI agents
The controls a security review asks about are built in and on by default. Every change to them is on the record.
Sign-in
Only the right
people get in
SSO through Okta or any SAML provider, two-step sign-in for everyone, and sessions that end on time.
Sign-in and SCIM
See who isn’t set up
Everyone still due, and when.
Tamish Mhatre can sign in with recovery codes if Okta is down.A way in, always
Owners keep recovery codes in case your identity provider is down.
PriyanshuDirectory sync
People are added, updated and suspended from your identity provider.
Access
Admins govern.
They don’t read.
Each person’s chats and files are theirs. Admins see setup, cost, apps and the record. Secrets aren’t shown to anyone.
| What | You | Owners and admins | Billing admins |
|---|---|---|---|
| Chats and filesYour agents’ work, unless you share one | Yours | Private to you | Private to you |
| Agent setup, cost and appsWhat each agent is, costs and can reach | Yours | Every agent | Cost only |
| Connected accountsApp, account, status and last used | Yours | See and revoke | Not shown |
| Tokens and passwordsWhat an app or a sign-in uses to prove it’s you | Never shown | Never shown | Never shown |
| The audit logEvery request, approval, sign-in and change | Not shown | Read; owners export | Not shown |
| Sign-in and session settingsSSO, two-step sign-in, sessions, break-glass owners | Not shown | Owners only | Not shown |
Tokens nobody can see
Agents act through each person’s own accounts. The secrets are never shown.
Limits per tool
The most an agent can do in each app. Writes and deletes ask, or never run.
Audit log
Nothing happens
off the record
Every request, approval, sign-in and change is an event, with the value before and after. The log is chained and signed hourly, so an edit anywhere shows.
The audit log- 41Task requestedRefund 37 double chargesa3f9·c21
- 42Approval grantedPriyanshu · €1,284.505b20·e4d
- 43Refund sentstripe.refunds.create · 37e81c·07b
- 44File savedrefunds-oct.csv19d4·f6a
Try changing one
Each event carries the hash of the one before it. Change one amount and every event after it stops matching.
Signed every hour
Verify the chain yourself, any time.
Export what you see
CSV or JSON of the filtered view, for your own archive or SIEM.
Where it runs
Your data stays
where you put it
Run agents in Miles Managed Cloud, your own AWS, Azure or GCP account, or on your premises, air-gapped.
Deploy anywhereAir-gapped AI on your premises
Miles, the agents’ computers and the model, all inside your network. Nothing goes out.
One switch stops it all
One typed phrase stops every agent and sleeps every computer. Only an owner turns it off.
Checklist
For your
security review
The short version, for the questionnaire. Book a call for the rest.
- Data where you choose
- Miles Managed Cloud, your cloud region, or your premises.
- Asks before it acts
- Sending, paying and deleting wait for a person.
- Tamper-evident log
- Hash-chained, signed every hour, kept for a year.
- SSO and SCIM
- SAML with a tested sign-in, break-glass owners and directory sync.
- Two-step sign-in
- Required for everyone, with a grace period.
- Tokens never shown
- Admins see each connection’s status, never its secrets.
- Machines need approval
- New machines get no work until approved; revoke and block any time.
- Kill switch
- Stop every agent and computer with one typed phrase.
More of Miles
Open this week
Bring your security questions.
Bring a real task. We’ll show an agent doing it on its own computer, in your apps, and asking before it acts.
+3
Book a call