Four are live — Lens, Journey, Glyph and Pulse. Two are in development — Lobby and Throne. Each is a finished operator application your team runs under your own name. All of them share one inventory, so the account Lens flags is the account Journey offboards and Pulse watches.
Who has access to what — in a report an auditor accepts. Lens reads the client's directories, HR exports, cloud and SaaS accounts and answers the question every audit starts with. It never writes back, so it cannot break anything — which is why most partners start here.
Access granted and removed when people arrive, move and leave. Journey turns the HR event into the access change. A new hire gets what the role needs on day one; a leaver loses everything on the last day; a transfer loses the old and gains the new. The operator sees it as a case queue, not a script.
Who may sign in, and what they may do once they have. Glyph is the sign-in service for the workforce and the policy engine behind every product. It answers one question for people, services and agents alike: may this subject do this action on this resource, right now?
When an account starts behaving wrongly, see it and stop it. Pulse watches the accounts the other products know about. Sign-ins from two countries in an hour, privileges that grow overnight, a service account that suddenly reads everything — detected, correlated with the inventory, and contained.
Guardrails protect the agent's head. Aurelion governs what its hands can reach.
The front door for the client's own customers.
Sign-up, sign-in, social and passwordless flows, consent and self-service for customer accounts — on the same sign-in engine and inventory as the rest of the line.
Admin rights for the time they are needed, with a record.
Vaulted credentials, time-boxed elevation, session recording and break-glass for human admins and privileged service accounts.
Bring one client where the relationship already exists. We will stand up the environment with you.
