28°44'S 24°46'E / Kimberley

Runestone

Defensive AI for code estates, read-only by architecture.

Book a Walkthrough
Understand line / Stop 03 / Defensive AI, read-only

02 / Runestone

How It Works

From a new commit to a finding with its blast radius.

Illustrative

RuneWeave graph

Blast radius
Commit a41f9csp_update_paymentpaymentsledgerPayments API

Finding / audit

Unvalidated input reaches the payments table. Remediation hints attached.

Access
Read-only
Agent run
Versioned
Routed to
Payments team

03 / Runestone

What It Does

  • 01

    Machine-Readable Estate

    Read-only crawlers catalogue source code, stored procedures, database objects, APIs, configs and integrations into a versioned, branchable graph.

  • 02

    See Real Risk

    RuneWeave maps each finding to its blast radius, so teams prioritise fixes by operational consequence.

  • 03

    Living Documentation

    Generates plain-language documentation continuously, so new engineers get up to speed and tribal knowledge stays put.

  • 04

    Triage and Routing

    CXQL queries, dashboards and routing rules filter findings and assign them to the right owner or playbook.

04 / Runestone

Control and Audit

Guardrails, where a person decides, and what gets logged.

Guardrails
Read-only by architecture: scoped service principals, replica access and an enforced no-write posture. Defensive use only, with no exploit generation.
Where a Person Decides
Findings are structured for remediation and routed to an owner, who tests fixes and validates outcomes without risking production.
What Gets Logged
Every commit, annotation and agent action is versioned with chain of custody.

Praxis is the agent framework in VectorMind. Agents plan, call tools and validate their results, and every step is logged with its tool inputs and outputs. See Praxis

  • Tenant isolation
  • Full audit trail
  • POPIA and GDPR
  • Model choice

05 / Runestone

Where It Runs

Sovereignty, deployment and POPIA.

Where it runs: Your cloud tenant in the region you choose, a South African data centre or on-premise

01 / Your tenantVectorMind runs inside your own cloud tenant, in the region you choose, including the EU.
Deployment
Inside your own cloud subscription, so code, graph and findings stay under your control.
Built
In Pretoria, with sovereign deployment options.
Platform
Cloud, private cloud or sovereign on-premise environments, with tenant isolation.
POPIA
CohesionX platforms never train on your sensitive information, and follow strict access controls, encryption and compliance protocols, including POPIA and GDPR.

06 / Runestone

Specs

Inputs
  • Source code
  • Stored procedures
  • Database objects
  • APIs
  • Configs
  • Integrations
Outputs
  • Versioned graph
  • Findings with blast radius
  • Plain-language documentation
Integrations
  • CXQL
  • CVE feeds
  • Historical logs
  • Telemetry
  • Test results
Deployment
  • Your cloud subscription
  • Read-only replicas
Platform
  • VectorMind
  • Tenant isolation
  • Full audit trail
  • POPIA and GDPR
  • Model choice

07 / Runestone

On the Line

Runestone on the Understand line, with its neighbours.

  1. VectorMindInterchange
  2. IrisVisual data extraction
  3. ConversationIQAI call analyser
  4. RunestoneYou are here
Book a WalkthroughAll products