Identity security, delivered by partners
Become the identity-security provider for the clients you already know.
Aurelion gives you a finished product line covering employees, service accounts and AI agents, the operating model to run it as a service, and direct founder-level support. You bring the market access, put your own name on the product and own the client.
01 · The problem your clients have
A mid-size company cannot answer "who has access to what".
Auditors and regulators now demand that answer. Most companies with 100–3,000 employees cannot produce it.
Terminated employee
Left in March. Mail, CRM and VPN still work.Contractor
Got production access "for a week". Nobody approved it. Six months ago.The auditor's question
"Show me who can reach the payment system." Answered in spreadsheets, weeks later.
02 · The gap
The vendors who could solve it don't sell to the mid-market — and won't.
This is not an oversight; it is their economics. HashiCorp earned ~89% of revenue from ~900 large accounts and spent 63–84% of revenue on sales for seven years without turning a profit. Teleport closed its mid-market tier in 2024. Okta, SailPoint, CyberArk and Oak Identity sell direct to large enterprises. The demand exists; the supply does not reach it.
03 · What Aurelion is
Six products on one kernel. Your brand on the surface.
| Product | What your client gets |
|---|---|
| Lens | An access audit: orphaned accounts, excess rights, accounts with no owner — in a report an auditor accepts. |
| Journey | Joiner, mover, leaver: access granted and removed when people arrive, move and leave. |
| Glyph | Sign-in for the workforce and the policy engine that decides who may do what. |
| Pulse | Detection and response when an account — human or machine — starts behaving wrongly. |
| Lobby | Customer sign-in and consent. In development. |
| Throne | Privileged access: vaulted credentials, time-boxed elevation, session records. In development. |
04 · AI agents
AI agents are the next access problem. Aurelion already counts them.
Platforms secure their own agents. Aurelion is the layer above all of them: every agent, whichever platform runs it, in one inventory with the people and service accounts it shares credentials with.
Found where they live
OAuth grants, MCP servers, agent platforms, automation tools, API keys in vaults and CI.Resolved through their tools
What an agent can do is agent → tools → application functions, and the set changes at runtime. Lens resolves it.Agent calling agent
The full call chain lands in the audit trail, not just the last hop.Baselined by task, not by schedule
Pulse learns the sequence of calls inside a task, so "different every time" is not "anomalous every time".
Guardrails protect the agent's head. Aurelion governs what its hands can reach.
05 · How the money works
A subscription business, not a project business.
Your client pays monthly, like for connectivity or guarding. Revenue recurs and compounds: a new client adds to the old ones instead of replacing them. Aurelion takes a fixed share for the product; you keep the rest and own pricing, invoicing and the relationship.
Aurelion never deploys at your client, never hosts, never speaks to your client.
06 · Where to start
Start with Lens. It reads; it cannot break anything.
Read-only means no change to the client's systems — and no 24/7 operations centre to start. First findings on real data in two to three weeks. The deliverable is a report the client's auditor accepts.
Or start with the AI-agent inventory — the same read-only audit, scoped to agents. For clients whose first question is "what is running in our name?"
07 · Two ways in
Two ways in. One model.
You have engineers
Integrators and software vendors: licence the products, deploy and run them yourselves, with LTS and signed releases behind you.You have market access
Providers and consultancies: a turnkey service, the full operating playbook, and the founder on the call.
08 · Why you can trust what's underneath
Source-available code you can inspect.
The kernel converts to an open licence on a fixed date. Signed releases, SBOM, CVE process, long-term supported branches — so you can answer your client's security questionnaire with facts.
Start with one client