Run API and AI agent security entirely on your own infrastructure.
Cyron On-Premise is the complete platform on your servers. Cyron API Security and Cyron AI Security install together and work as one loop: one sensor, two engines, one enforcement point. Your traffic and your findings stay in your network.
One package. Two products. One loop.
One sensor. Two engines. One enforcement point. iris captures the traffic. Cyron API Security judges the API layer. Cyron AI Security judges the agent layer. iris blocks the source. Your SIEM gets the evidence. Two ways to enforce: out of band from the kernel sensor, with no change to your agents; or inline, with Cyron AI Security as a gateway that refuses a malicious call before it reaches the tool. Choose per installation.
Cyron API Security
The full platform, not a reduced edition: real-time scoring, deep analysis, behavioural intelligence, threat intelligence, the dashboard and the AI analyst, running on your own hardware with no monthly quota.
Cyron AI Security
Agent boundary protection for MCP and A2A traffic: 15 detectors, blocking by threat class and severity, and durable evidence for every detection. Included with Cyron On-Premise and set up in the same install.
iris
The eBPF kernel agent that feeds both engines and enforces their verdicts. It captures API and agent traffic without sitting in the request path, and drops an attacker's packets at the kernel.
Installed by one script. Upgraded in place.
01
Receive your package.
Built for you: your own keys, a signed licence, the installer, every container image, and detection models encrypted with a key unique to you.
02
Run the installer.
One script checks the host, loads everything offline, validates the licence and starts the platform, with iris and Cyron AI Security set up alongside. The first login forces a strong password before anything else.
03
Operate and upgrade.
Upgrades keep your data and apply database changes automatically. Threat intelligence and agent-threat definitions arrive as signed offline updates.
A Linux host with a container runtime. The AI analyst runs on CPU and accelerates on a GPU; Cyron AI Security needs no GPU. Supports Ubuntu, Debian 11 or later, RHEL and Rocky Linux 8 or later, and Amazon Linux 2023. We size the deployment with you during evaluation. A signed licence file, issued for your deployment. Cyron AI Security never calls home.
Designed to support your compliance work
NIS2
EU cybersecurity directive for essential and important entities.
DORA
Digital Operational Resilience Act for EU financial entities.
GDPR
Traffic and findings stay in your network.
PCI DSS 4.0
Payment card data protection.
HIPAA
US healthcare data protection within your perimeter.
For environments where traffic must not leave
Financial services
Payment, trading and open-banking APIs, and the agents now built on them. For teams working under DORA and PCI DSS.
Healthcare
Patient identifiers in API responses, clinical integrations and agents with access to records, all kept on your servers.
Public sector and defence
Closed and classified networks. Install and update offline; Cyron AI Security runs fully air-gapped.
Critical infrastructure
Energy, telecoms and transport operators in scope of NIS2 who want detection and evidence with no new cloud dependency.
AI platform teams
You run agents with tool access inside the company and need to show what they did. Secure MCP and A2A without rewriting your agents.
See it running on your own servers.
Tell us about your environment: the APIs, the agents and the network they run in. We will scope an evaluation of Cyron On-Premise with you.
Want to judge the engine first? Cyron API Security has a free SaaS plan. Start free