Software In A Service

AI agents that ship work — governed like employees, not chatbots.

Production-ready agents engineered around your processes: 425 catalogued agents across 8 domains, each a first-class principal with its own identity, scoped credentials, and full action logging. Designed, secured, hosted, and monitored by Citadel.

Book a discovery call Download the AI Agent Blueprint

8Domains
28Function groups
425Catalogued agents
3Autonomy tiers

Most “AI agents” are a demo that impresses in a meeting and stalls in production — no identity, no guardrails, no audit trail, no owner. The blocker to real automation isn’t the model. It’s governance: who is allowed to do what, with which credentials, and how you prove it afterward.

One governance model, applied to every agent

Every agent is a first-class principal with its own identity and full action logging. Autonomy is set per agent, per action, across three tiers — so you graduate trust deliberately instead of betting the business on a black box.

Autonomous

Read-and-report. Triage, analysis, and drafting run unattended — the agent observes and recommends, but changes nothing.

Supervised

Writes to systems of record within scoped credentials and change windows. Every write is attributable and reversible.

Human-gated

Anything touching money, people, or legal is draft-only behind named approvers, with four-eyes enforcement.

Delivery: Discovery → agent selection & grounding → sandboxed rollout at T1 → graduated autonomy → monitored operation.

The catalog: 8 domains, 425 agents

Agents are chosen from this catalog and grounded in your corpora — runbooks, ADRs, policies, catalogs. Search for a capability, tool, or domain to see what fits your stack.

Search the catalog

425 agents across 8 domains

Build, ship, and run software and infrastructure

4 function groups · 77 agents

Software Engineering

The full development lifecycle from design through maintenance, integrated with repos, CI, and issue trackers.

DevOps and Platform Engineering

Delivery pipelines, runtime operations, reliability, and cost. Incident-facing agents pull from live telemetry through read-scoped tools.

Network Operations

Configuration, connectivity, and traffic engineering across on-prem, cloud, and edge. Config-writing agents are T2 with change-window enforcement.

Cloud and Enterprise Architecture

Design-time agents: blueprints, reviews, and migration planning grounded in the organization's own standards and reference architectures.

Scope build agents — book a call

Defend, detect, govern, and prove it

2 function groups · 43 agents

Security Operations

Around-the-clock triage, hunting, and response. Tier-1 triage agents run at T1; anything that isolates a host or disables an account requires a human gate.

SOC Analyst (Tier-1 Triage)
Threat Hunting
Threat Intelligence
Detection Engineering (SIGMA / KQL / YARA)
Vulnerability Management
Penetration Test Assistant
Malware Analysis
Phishing Triage
SIEM Investigation
SOAR Automation
Incident Forensics
Ransomware Response
Insider Threat
Attack Surface Management
Red Team Emulation
Purple Team Exercise
IAM
Identity Governance
PAM Review
DLP
Secrets Leak Detection
Cloud Security
CSPM
CNAPP
Container and K8s Security
Supply Chain Security (SBOM)
AI / LLM Security
Zero Trust Advisor
Security Awareness Training
Risk Assessment

Governance, Risk and Audit

Frameworks into evidence, evidence into audits. These agents make compliance continuous instead of an annual scramble.

Compliance Mapping (SOC 2 / ISO 27001 / HIPAA / PCI / FedRAMP)
Policy Drafting
Control Testing
Evidence Collection
Internal Audit
Third-party / Vendor Risk
Enterprise Risk Register
Regulatory Change Monitoring
Privacy (GDPR / CCPA / DSAR)
Data Protection Impact Assessment
Business Continuity and DR Planning
AI Governance (Model Risk / EU AI Act)
ESG Reporting

Scope defend agents — book a call

The data estate and the machinery of intelligence

2 function groups · 43 agents

Data Engineering and Analytics

Pipelines, quality, governance, and the analytics surface. SQL-writing agents run against read-only replicas with row-level security intact.

AI, ML and LLMOps

The platform operating on itself: model lifecycle, agent quality, safety, and spend. These agents gate what every other agent is allowed to become.

Scope data estate and the machinery of intelligence agents — book a call

The functions that run the company

6 function groups · 100 agents

IT Service Management

The employee-facing service desk and the asset estate behind it. Deflection-first: resolve at T0-T1, escalate with full context.

Human Resources

Hire-to-retire. Screening and review agents carry bias-audit requirements in their eval suites as a deployment precondition.

Finance and Accounting

Transaction processing through planning. Anything that moves money is T3: draft-and-approve only, full audit trail, four-eyes enforcement.

Procurement and Supply Chain

Source-to-pay and plan-to-deliver. Supplier risk agents merge external signals with contract obligations from the legal corpus.

Legal

Contracts, counsel, and discovery. Uses the graph-walk retrieval profile against a clause knowledge graph; privileged corpora are tenancy-isolated.

Product, Project and Program Management

From product definition to portfolio delivery. Synthesis-heavy agents that turn meetings, feedback, and tickets into decisions and artifacts.

Scope functions that run the company agents — book a call

Find, win, keep, and grow customers

3 function groups · 55 agents

Sales and Revenue Operations

Prospect to renewal. CRM-writing agents are T2; pricing approval workflows stay human-owned.

Marketing and Communications

Demand, brand, and comms. Generation agents draft against the brand corpus; publishing is always a human action or an approved automation with rollback.

Customer Experience and Support

Every support channel plus the analytics behind them. Deflection with dignity: grounded answers, cited sources, clean handoff with full context when escalation is right.

Scope find agents — book a call

Specialized agents for regulated and domain-specific work

6 function groups · 61 agents

Healthcare and Life Sciences

Clinical, administrative, and research workflows. FHIR R4/R5-aware retrieval; clinical suggestion agents are decision support, never autonomous diagnosis.

Financial Services and Banking

Regulated money movement and market-facing work. Every decision-support output carries model-risk documentation per SR 11-7-style governance.

Insurance

First notice of loss through subrogation. Adjudication agents recommend; adjusters decide above defined thresholds.

Retail and E-commerce

Catalog to conversion. Pricing agents operate inside guardrail bands with margin floors enforced by policy, not prompt.

Manufacturing, Energy and Industrial

OT-adjacent agents are strictly read-only against historians and SCADA exports; nothing on this platform writes to a control system.

Public Sector and Defense

Cleared-environment patterns: IL-appropriate hosting, CUI handling, and FedRAMP-aligned controls from the GRC corpus. Air-gapped model options via the gateway.

Scope specialized agents for regulated and domain-specific work agents — book a call

The widest lens, the strictest access control

1 function group · 14 agents

Executive Copilots and Strategy

Per-role copilots plus the strategy functions that serve the whole leadership team.

Scope widest lens agents — book a call

Every agent is a first-class principal

4 function groups · 32 agents

Agent Identity and Credentialing

First-class identity per agent instance. Attestation binds a running workload to its registry entry; every credential is short-lived and issued by the broker, never checked into code or config.

Delegation and Authorization

Every action an agent takes on a user's behalf carries a verifiable delegation chain: token exchange at the boundary, purpose binding on the grant, and scoped tool permissions evaluated at a policy decision point on every call.

Non-Human Identity Governance

Agents multiply non-human identities faster than quarterly reviews can catch. Continuous discovery, ownership attribution, rotation enforcement, and joiner-mover-leaver lifecycle applied to machines the same way it is applied to people.

Identity Threat Detection and Response

Runtime defense for agent identities: detect impersonation, token theft and replay, confused-deputy patterns, and privilege escalation, then revoke fast through kill switches wired into the model gateway.

Scope every agent is a first-class principal agents — book a call

Ready to see which agents fit your stack?

A 30-minute discovery call to scope the highest-value, lowest-risk agents first — usually T1 read-and-report — then graduate autonomy as trust builds.

Book a discovery call Pick a time on Calendly