The ecosystem
One ecosystem. Xavani is the core.
Xavani is our open-source AI agent gateway. It is the core of the ecosystem. Four open-source projects and all 23 Security Cloud products connect to it as one system. You discover once. The system remembers everything. You secure it all. An agent runs the work.
XavaniThe open-source AI agent gateway.NyarhiAgents that never forget. Local. Private.GavazaPrivacy law, turned into checklists. Not lawyers.MhanganiFearlessly audit your defenses.
Select a project. Four open-source projects orbit one sun. Free and local, open-core into the Security Cloud.
Xavani is the core.
Xavani is the agent gateway for the ecosystem. Every other project connects to it.
#1
Xavani orchestrates
Xavani runs all 23 products as agent skills from one CLI. It scans, triages, reports, and responds.
#2
Nyarhi remembers
Nyarhi stores your knowledge in a local-first graph. Every agent and module reads durable, private, cited knowledge of your systems.
#3
Gavaza proves
Gavaza provides POPIA compliance checklists, PAIA manuals, and breach registers. You can show this evidence to a tender committee.
#4
Mhangani secures
Mhangani audits your web properties against OWASP-aligned checks. It verifies headers, TLS, cookies, and CORS. It gives a posture score and clear remediation.
23 products. One system.
Every product shares one asset graph and one posture score. A Xavani agent operates every product. The four suites use the same open foundation.
Offensive Suite
OffenseFind it first. Pen testing, recon, and AI red-teaming.PenForge
Pentest delivery, finding library & client portal.
ReconForge
Continuous attack-surface management.
NetFortify
Firewall & network-config auditor with CIS benchmarks.
PromptShield
AI/LLM application security scanner (OWASP LLM Top-10).
ZeroTrustMapper
Segmentation & zero-trust design and scoring.
RangeForge
Cyber range & vulnerable-lab-as-a-service.
AppShield
AI-assisted code security (SAST/SCA) with fix diffs.
Defend Suite
DefenseWatch & respond. Detection, response and asset intelligence.SentryStack SA
SME managed detection & response (MDR/SIEM).
ThreatLens
AI log search & anomaly analysis.
AssetGuard
Asset inventory with live CVE correlation.
PatchPilot
Patch posture & priority advisories.
SecuriBot
AI security copilot across your whole posture.
CloudPosture
Cloud security posture management for AWS, Azure and GCP.
Compliance Suite
ComplianceProve it. POPIA, ISO 27001, PCI, SOC 2 and the Joint Standard.POPIA Pack
Guided POPIA compliance with AI policy generation.
ComplyHub SA
Multi-framework GRC across ISO, PCI, SOC 2, NIST.
IncidentDesk SA
Incident management and breach-notification preparation.
VendorGuard SA
Third-party & vendor risk with outside-in checks.
SME Essentials
RecommendedGet protected fast. The core stack for South African SMEs.MailArmor SA
Email security & DMARC. The free lead-magnet check.
SecureCheck SA
Continuous external-exposure & POPIA-readiness scoring.
PhishGuard SA
SA-localised phishing simulation & human-risk training.
DarkWatch SA
Dark-web & breach monitoring for leaked credentials.
CyberDojo SA
Gamified, localised security-awareness LMS.
TenderPulse SA
AI-matched government tender monitoring & bid intel.
Open-core by design.
The open-source products are free and local. The Security Cloud products are hosted and multi-tenant.
Free & local (open source)Security Cloud (paid)
Xavani Platform AI CoreNyarhi SecuriBotGavaza ComplyHubMhangani PromptShield