Enterprise Trust & Compliance Portal
Complete vendor risk assessment, pre-filled SIG Lite packet, air-gapped VPC architecture guarantees, and statutory compliance controls for Fortune 500 and high-growth AI engineering teams.
Zero customer source code, secrets, or prompts are sent to external servers. Execution is 100% local.
Runs with AGENTSHIELD_AIR_GAPPED=1 inside air-gapped AWS/Azure VPCs with 0 bytes outbound.
Full compliance with India DPDP Act 2023, EU GDPR Article 32, and SOC 2 Type II controls.
Tamper-proof HMAC SHA-256 audit ledger guarantees immutable compliance proof for auditors.
Real-Time Security & Compliance Posture
Pre-compiled vendor intake files for OneTrust, ServiceNow, Whistic, and corporate InfoSec audits.
Pre-Filled Standard Information Gathering (SIG Lite) Assessment
Standardized security answers ready for your procurement and SecOps onboarding reviews.
Does AgentShield or RitualDev ingest, store, or transmit customer source code, secrets, or prompt data to multi-tenant cloud servers?
No. AgentShield is architected on a Zero-Data-Retention model. All regex scanning, kernel sandboxing, and token redaction execute 100% locally on the developer workstation or within the customer's private air-gapped CI/CD runner. Zero bytes of customer code or credentials leave the machine.
How are compliance audits and redactor records protected against local tampering or falsification?
AgentShield uses a cryptographically verified Tamper-Evident Ledger. Every scanned event, redaction action, and blocked system call is hashed into a sequential HMAC-SHA256 block chain using local cryptographic salts. Any manual modification or truncation of audit logs invalidates the cryptographic signature chain.
What isolation mechanisms prevent autonomous AI coding agents from accessing unauthorized host resources?
AgentShield enforces kernel-level confinement using Linux Landlock and Bubblewrap (bwrap), and macOS Seatbelt (sandbox-exec). Process environments, /proc pseudo-files, SSH keys, AWS credentials, and parent-process memory spaces are mounted read-only, masked, or permanently blocked before process spawn.
How is the authenticity and build provenance of published npm packages guaranteed against supply chain compromises?
All official releases are published with SLSA (Supply-chain Levels for Software Artifacts) build provenance signed cryptographically by GitHub Actions OIDC and logged in Sigstore transparency logs. Packages are signed by author ritual_dev with SHA-512 integrity hashes.
What is RitualDev's vulnerability management policy and remediation SLA for security advisories?
RitualDev maintains a dedicated Security Response Team reachable at security@ritualdev.in. Vulnerability reports receive initial human triage within 4 hours and guaranteed engineering patches within 24–48 hours, synchronized through official GitHub Security Advisories (GHSA).
How are commercial transactions, global VAT, Indian GST, and credit card processing governed?
Commercial transactions are administered through Dodo Payments as authorized Merchant of Record. Dodo Payments is PCI-DSS Level 1 compliant and handles statutory sales tax, EU VAT, and Indian Goods and Services Tax (GST) remittance automatically.
Require a custom Mutual NDA, completed vendor security questionnaire, or dedicated DPA?