Welcome to Eihwaz
Eihwaz is a CEVE-validated MDR agent that conducts security operations autonomously, with full traceability, dual-approval governance, and a tamper-evident audit chain.
A New Architecture for the Cybersecurity of the Future.
What Eihwaz Is
Eihwaz is a contract-driven AI agent that ingests raw security events and produces a complete, audit-traceable incident package: classification, scoring, correlation, response plan, privileged actions, and a finished incident report. Everything takes place within a strict framework consisting of 13 validated nodes and a formal 18-gate CEVE standard.
The Fleet Architecture
Eihwaz is the hub of a fleet of CEVE-validated specialist agents: email, endpoint, identity, network, cloud, and exposure. Each agent is isolated, has its own privileged actions, and its own PII threshold. The Fleet repository (MacroHub) aggregates k-anonymous intelligence from all agents and creates shared immunity without sharing data.
Our Competitive Advantage
- Contract-governed composition – each node has a typed input/output contract.
- CEVE 100/100 – 175/175 approved validation runs.
- Tamper-evident audit chain (HexaRecord) – SHA-256-linked, verifiable.
- Tiered authorization (CCAS) – T1–T4, where T4 requires two independent approvers.
- HexaLearn memory loop – per-agent memory, isolated and PII-scrubbed.
- Sovereignty Guard – incident data can only be sent to tenant-owned endpoints.
- K-anonymity – shared immunity without shared data.
The competitive advantage lies in the architecture—not the model. It cannot be replicated simply by purchasing an LLM.
Operator View
Driver View – a cockpit for autonomous, safe operation. Everything is live. Nothing is synthetic. Every decision is recorded in the audit chain.
Level of Autonomy
CCAS Workflow (auto/review/escalated)
Incident Queue with SLA Timers
Audit chain with live verification
NIS2 Deadlines
Per-node status and degradation signals
Regulatory compliance is part of the architecture—not a layer on top of it.
- NIS2 – incident management, tamper-evident logging, reporting clock.
- Zero Trust – per-request authentication + CCAS gateway.
- GDPR – PII floor, k-anonymity, retention, erasure using hash tombstones.
- EU AI Act – traceability, human oversight, robustness signals.
- DORA / ISO 27001 – egress encryption, resilience signals, CEVE-driven change management.
Contact Us
Visit us
Vikdalsgränd 10B
131 52 Nacka Strand
Sweden
contact@eihwaz.co