ROSS — AI Control Plane
Heavisideai · Operations & Productivity
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 3 captures on record
What the publisher says
As described on Microsoft Marketplace.
The Shadow Workforce in Your Microsoft Tenant
92% of CISOs lack full visibility into the AI identities in their environment. Those are privileged users HR never onboarded, no one manages, and no one knows how to offboard.
Show the rest of the publisher’s description (20 more lines)
Your Microsoft tenant is quietly accumulating a massive population of non-human identities (NHIs) — AI agents, service principals, and legacy automations. They hold persistent access, often carry non-expiring keys, and operate entirely outside your standard identity lifecycle. You cannot secure what you cannot see, and right now, you cannot switch them off without risking operational downtime.
ROSS is the control plane for your non-human identities.
Built specifically for the CISO and security leadership, ROSS bridges the critical governance gap in your cloud environment, giving you visibility and definitive control over every automated identity in your tenant.
How ROSS Secures Your Tenant
- Zero-Impact, Read-Only Discovery
Connect ROSS and initiate a complete census of your directory. Operating strictly read-only, ROSS maps every agent, identifies the original publisher, calculates its blast radius (what it can touch), flags orphaned accounts lacking human accountability, and exposes vulnerabilities like non-expiring keys. You get an immediate, accurate posture assessment without altering a single configuration.
- See the Floor, Not Just the Roster — Floor Trails™
Your directory only admits to the agents that registered. Pair ROSS with Gateway Sessions and its Floor Trails™ event stream — a disclosed, signed, capability-only telemetry trail emitted from the floor where agents actually operate. ROSS reads the trail and catches agents at work that hold no directory identity at all, gives each one a file, and puts it under the same accountability as everything else. Floor Trails™ carries names, counts, and fingerprints — never a prompt, never a response, never your content. The census stops being what your directory claims and becomes what is actually running.
- Confident, Predictable Remediation
When you find unacceptable risk, ROSS provides the kill switch. Choose to Restrain or Delete an agent. Before execution, ROSS shows you the full plan — exactly what will happen and what cannot be undone — including a warning when the agent is Microsoft's own.
- Immutable Audit Trails for Compliance
Every action taken through ROSS generates a signed, tamper-evident receipt written to an append-only ledger. If an action is refused — even by Microsoft's own backend — the ledger reflects it accurately. When auditors or the board ask what happened in your tenant, you have an irrefutable, cryptographically sound answer.
Strengthening Your Existing Security Stack
ROSS does not replace your current investments; it completes them. While Microsoft Entra handles access management and Defender monitors for active threats, ROSS answers the fundamental governance questions:
- What are these agents?
- Who owns the risk?
- How do we safely turn them off?
The Bottom Line
Predictable security requires predictable budgeting. ROSS is offered at one flat annual price for your entire tenant — no hidden consumption fees, no per-agent penalties.
Stop guessing about your non-human attack surface. Start your free trial today and get a definitive read on your own directory.
Preview
4 images
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Plans and pricing as listed
1 listedSources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.