AIZA-HexTyx Platform: Scanner, Aegis Runtime Shield, AXIOM + Memory Graph

One platform, three components

AIZA-HexTyx is a single AI security platform built around one loop: test your AI system, protect it at runtime, and understand what happened.

HexTyx Scanner finds the bypass→Aegis Runtime Shield blocks it live→Memory Graph keeps what was learned→AXIOM explains it

Component	Role	What it does
HexTyx Scanner	Test	Automated AI red team: 23 scan phases, 33 attack modules, MITRE ATLAS-mapped findings
Aegis Runtime Shield	Protect	Gateway with 5 checkpoints, a Dead Man's Switch and an Agent Suspend Switch
AXIOM + Memory Graph	Understand	Embedded AI analyst plus cross-scan attack intelligence

HexTyx Scanner: test

HexTyx Scanner attacks your AI application the way an adversary would and confirms each finding with a proof marker before reporting it. Its pipeline has 23 scan phases and draws on a library of 33 attack modules covering prompt injection, RAG poisoning, agent tool abuse, MCP, zero-click and multimodal attacks. Findings map to MITRE ATLAS and arrive as fix-ready reports.

The modules are validated against 28 purpose-built vulnerable domain apps with known ground truth, and benchmarked across 8 LLM providers, so detection is scored on real results. The free plan runs 10 of the 23 phases; paid plans run all 23.

Run a free scan · How an AI agent vulnerability scanner works

Aegis Runtime Shield: protect

Aegis Runtime Shield is a gateway that sits between your users and your live AI application. Every request passes five checkpoints: input, RAG retrieval, tool calls, output and audit. Combined checkpoint latency measured at about 32 ms in testing.

Audit trail. Each decision is written to a tamper-evident log with a per-record integrity hash.
Dead Man's Switch. If the gateway stops receiving its heartbeat (default 300 seconds), it wipes canary tokens and runs its shutdown callbacks. See the Dead Man's Switch guide.
Agent Suspend Switch. An administrator can suspend a specific agent identity, using a two-factor stage-and-confirm flow. A suspended agent's tool calls are blocked and each blocked attempt is quarantined for review.
Scanner-fed rules. Scan findings can update Aegis Runtime Shield detection patterns automatically through the calibration loop.

AXIOM + Memory Graph: understand

AXIOM is the AI analyst built into the platform. It answers questions about your findings, policy decisions and audit records, and it is embedded in both the scanner dashboard and the Aegis Runtime Shield gateway.

Memory Graph (full feature guide) records every scan as nodes, edges and clusters: models, attacks, outcomes and OWASP and MITRE categories. It groups attacks that behave alike and flags attacks that succeed against one model and transfer to another, so each scan makes the next one sharper.

Frequently Asked Questions

What is AIZA-HexTyx?

AIZA-HexTyx is one AI security platform with three components: HexTyx Scanner, which red-teams your AI system; Aegis Runtime Shield, which checks live traffic; and AXIOM + Memory Graph, which explain findings and accumulate attack intelligence.

What is the difference between 23 scan phases and 33 attack modules?

The 23 phases are the stages of the scan pipeline. The 33 attack modules are the library of attack techniques the scanner draws on. They are separate counts, not one inside the other.

What does the Agent Suspend Switch do?

An administrator can suspend a specific agent identity through a two-factor stage-and-confirm flow. While suspended, that agent's tool calls are blocked and each blocked attempt is recorded in a quarantine list for review.

How do the three components work together?

The Scanner finds the bypass, Aegis Runtime Shield blocks it at runtime, Memory Graph keeps what was learned across scans and models, and AXIOM explains it in plain language.

Start with a free scan

See what HexTyx Scanner finds in your AI application in minutes.

Run Free Security Scan