Security is a property of where your agents run

Yes. The platform installs as native Kubernetes workloads in your environment, including fully disconnected deployments. Because the agent is an ordinary workload in your cluster, your firewall and network policy govern its egress. A deny-by-default policy means an agent has no route out, enforced by your infrastructure rather than by a setting we control.

No. Agents compose the intent of a tool call, and the credential is attached downstream on the execution path, after the model’s context ends. Secrets are held in a vault and injected at call time. There is nothing in the model’s context to leak or to pass to another agent.

A cloud-hosted platform draws the boundary around your agents inside its own infrastructure, and you get an assurance you cannot inspect or change. xpander installs in an environment you control, so the boundary is yours: your network policy, your monitoring, your identity provider, your data. You are not asked to trust an isolation you cannot see.

xpander is model-agnostic. Any provider or self-hosted open-weight model sits behind one gateway, and you set which models are allowed, how traffic routes, and what happens on failure as policy. When a model changes, is repriced, or no longer meets your requirements, you swap it and keep the agent. Your data is covered by zero-retention agreements and is never used for training.

Your systems become governed connectors, and agents act with the invoking user’s identity through OIDC, down to individual tools and to model inference. An agent inherits the access of the identity behind it and nothing more, and retrieval respects the asking user’s permissions. Every call is attributable to a real user.

Because the platform executes each action, runs, traces, tool calls, approvals, costs, and failures are recorded as they happen. Traces, logs, and metrics export to your existing observability and SIEM tooling, so agent activity is visible alongside everything else you monitor.

xpander is SOC 2 Type II certified and GDPR compliant. Reports, subprocessors, and our current security posture are available in our Trust Center at trust.xpander.ai.