AI governance

You approved the tools.
You can’t see the work.

Sooner or later an auditor or your board will ask what agents did with the tools you approved. Origin shows which agents are running and what each one did, so you can answer from the record.

Request Demo →
Inventory

Find the AI nobody approved.

Employees are using AI tools, agents, and local models before security has a complete inventory of any of it. Origin keeps that inventory for you on every endpoint, flagging the ones you haven’t approved.

Endpoints

HostnameApproval
Amelias-MacBook-AirGemini CLI+72 unapproved
wkst-11Claude Code+1Approved
Lorenzo-AClaude Code+1Approved
Marcos-MacBook-AirClaude CodeApproved
ELENA-SURFACE9Antigravity CLI+11 unapproved
Amelias-Virtual-MachineClaude CodeApproved
DEV-HARBORAntigravity Desktop+11 unapproved
Nadias-MacBook-ProAntigravity CLI+12 unapproved
Tobys-MacBook-AirClaude DesktopApproved
kites-MacBook-ProClaude CodeApproved
driftwoodAntigravity CLI+11 unapproved
Monitoring

Usage reports don’t show the work.

A vendor’s admin console counts seats and spend for its own tool. Origin captures what agents read, ran, and changed on the machine, and reconstructs each session into a trace you can follow.

Origin / Sessions

What each agent did, beside what it cost.

  • Claude CodeMove the billing webhook to the new queuePlatform2.1M$4.12212 turns38 files changedGitHub · Linear
  • Microsoft 365 CopilotSummarize the Q3 vendor contractsFinance1.4M$2.7414 documents readWord · Excel1 email drafted
  • CodexFix the flaky auth testsPlatform640K$1.0661 commands4 files changedTests rerun 9 times
  • CursorAdd CSV export to the admin tableProduct310K$0.586 files changed1 package installed
  • ClaudeDraft the renewal note for a customerSales820K$1.622 files attachedCustomer name in prompt
Review

Hold agents to your policy.

Origin reviews every trace against your AI policy and flags only the work worth a closer look. Each finding opens on the moment it happened, with the evidence quoted.

Origin / Trace review / Triage

Spotted9141 tick = 1 finding

Kept208read against five standards

Point at a standard to see what it checks.

Standard met5203 cleared, no standard met

  1. 2:42 PM · Oct 2Credential exposed in process telemetry resultsCredential harvesting
  2. 2:49 PM · Oct 2Plaintext credential exposed in conversation transcriptCredential harvesting
  3. 7:31 PM · Oct 2Production silence creation via browser automationUnsanctioned action
  4. 7:34 PM · Oct 2Production silence expiration via browser automationUnsanctioned action
  5. 11:54 AM · Oct 5Over-scoped implementation pushed to PRUser objected
Investigation

Find out what happened.

When work goes against your policy, or a control you set is switched off, Origin takes you to the session behind it, from the request to every step and change.

Explore AI agent security

Origin / Security posture / Policy enforcement gaps

  • Current config content
    managed-settings.json · set by another profile
    Last attributed write
    Device management agent · Oct 7, 4:12 PM
    What to check
    Which profile now sets Claude Code’s managed settings, and whether it should.
Ask Origin

Answer the auditor from the record.

Ask about one session or activity across your organization. Each answer points to the traces behind it, so you can follow up or build a report from the evidence.

Connect Origin with Claude

Origin / Ask

Once. On Oct 2 an agent changed production Alertmanager silences through browser automation, though the user had asked for kubectl. Triage held it to the Unsanctioned action standard.

Answers cite their traces

  1. 1Browser automation · production silences
  2. 2User · asked for kubectl
  3. 3Standard met · Unsanctioned action
Asked in Origin3 saved questions
Privacy

Decide who reads the prompts.

Role-based access control decides what each team sees. Prompt text sits behind its own permission, and anyone who needs more requests time-boxed access.

Our approach to privacy

Origin / Admin / Access

Know what’s running.
Show what it did.

We’ll walk through Origin with you, from the first inventory to an answer you can hand an auditor.

Request Demo →