CISO dinner in Vancouver, Sept 9RSVP
Alaris
Pricing

Your team's playbook. Running as an agent.

Encode your team's procedures and tools into custom agents, with guardrails and observability built in.

Encode the Procedure

Your runbook, written in plain language

Describe the steps your team already follows and the judgment calls they make. No scripting, no DSL. The Build Suite turns that description into an agent spec you can review, version, and change whenever the procedure changes.

Agent BuilderDraft
Phishing TriageCustom agent
1
Check sender reputation and auth results
2
Detonate attachments in the team sandbox
3
Query the internal IOC database
4
Quarantine or escalate per severity rules
Connect Your Tools

Homegrown systems become agent tools

Internal APIs, custom sandboxes, and in-house IOC databases connect through MCP and become callable tools. Agents work with the systems you already built rather than only the vendors on a partner list.

Your tools, connected via MCP
ioc-db.internal
Internal API
MCPConnected
email-gateway
Custom tool
MCPConnected
sandbox-api
Homegrown
MCPConnected
ticketing
Internal API
MCPConnected
Ship to the Fleet

Custom agents run beside the native ones

Your agents deploy into the same fleet as Alaris triage, investigation, and hunt agents. They share the Security Graph, the same queue, and the same operator surface, so nothing runs off to the side.

Agent fleet
Triage AgentNativeLive
Investigate AgentNativeLive
Hunt AgentNativeLive
Phishing TriageCustomLive
Guardrails and Observability

Autonomy you can scope and audit

Every agent runs inside explicit limits: which tools it may call, which actions need approval, what data it can touch. Every run is fully observable, so you can see what the agent did and why before you widen its remit.

Agent GuardrailsEnforced per run
Tool scope
ioc-db, sandbox, gateway, ticketing
4 of 22 tools
Autonomy
escalations require approval
Supervised
Data access
no deletion, no admin writes
Read + quarantine
Fleet
Triage AgentInvestigate AgentHunt AgentPhishing Triage

Put your playbook to work as an agent