{"id":1000,"date":"2026-11-07T07:15:19","date_gmt":"2026-11-07T07:15:19","guid":{"rendered":"https:\/\/rimsift.com\/?page_id=1000"},"modified":"2026-11-07T07:15:19","modified_gmt":"2026-11-07T07:15:19","slug":"home","status":"publish","type":"page","link":"https:\/\/rimsift.com\/","title":{"rendered":"Home"},"content":{"rendered":"<p><em>Draft copy imported from the RimSift designer handover. Codes such as G4 refer to the graphics list. Text in [square brackets] is a placeholder or an open decision. Replace this block with the designed layout.<\/em><\/p>\n<p><strong>Page title (browser tab):<\/strong> RimSift | The control point for agentic AI <strong>Meta description:<\/strong> RimSift checks every AI tool call and chat: who is asking, what they may do, what&#8217;s hidden inside, and a full record of what happened.<\/p>\n<h3>6.1 Hero<\/h3>\n<ul>\n<li>Eyebrow: THE CONTROL POINT FOR AGENTIC AI<\/li>\n<li>Headline: Every AI tool call, checked at the <strong>rim<\/strong>. (&#8220;rim&#8221; in amber)<\/li>\n<li>Sub-headline: RimSift sits between your AI agents and the tools and models they use. It checks who is asking, enforces your policy, inspects every call and keeps a complete record, so your teams can use AI without losing control.<\/li>\n<li>Buttons: Book a demo \u00b7 See how it works (scrolls to 6.5)<\/li>\n<li>Visual: <strong>G1<\/strong> rim animation, right half on desktop, below the text on mobile.<\/li>\n<\/ul>\n<h3>6.2 Proof strip<\/h3>\n<p>One row directly under the hero. Design two versions:<\/p>\n<ul>\n<li><strong>Now:<\/strong> three short statements with icons: &#8220;Controls mapped to the OWASP MCP Top 10&#8221; \u00b7 &#8220;Deploy in the UK, the EU or your own cloud&#8221; \u00b7 &#8220;Built by the team behind Parrera&#8221;.<\/li>\n<li><strong>Later (hidden):<\/strong> greyscale customer-logo row, &#8220;Trusted by security teams at&#8221; + up to 8 logos.<\/li>\n<\/ul>\n<h3>6.3 The problem<\/h3>\n<ul>\n<li>Eyebrow: THE PROBLEM<\/li>\n<li>Headline: Agents connect. Then nobody watches.<\/li>\n<li>Body: Your teams are already wiring AI agents into email, code, customer records and internal systems. Most security tools decide whether an agent may connect, then stop looking. What the agent does next, which tool it calls, what data leaves and whether someone slipped it an instruction, goes unchecked.<\/li>\n<li>Three cards (&#8220;The options today&#8221;):<br \/>\n  1. <strong>Block AI.<\/strong> People use it anyway, on personal accounts you can&#8217;t see.<br \/>\n  2. <strong>Allow it.<\/strong> You approve the tool once and have no idea what it does after.<br \/>\n  3. <strong>Review everything by hand.<\/strong> Your team becomes the bottleneck and still misses the calls that matter.<\/li>\n<li>Line under the cards: &#8220;There&#8217;s a better option: check every call, automatically.&#8221;<\/li>\n<\/ul>\n<h3>6.4 Four checks (tabbed)<\/h3>\n<ul>\n<li>Eyebrow: THE PLATFORM<\/li>\n<li>Headline: One control point. Four checks on every call.<\/li>\n<li>Four tabs; each shows a short paragraph, three bullets and a mock screen.<\/li>\n<\/ul>\n<table>\n<thead>\n<tr>\n<th>Tab<\/th>\n<th>Paragraph<\/th>\n<th>Bullets<\/th>\n<th>Visual<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Identity<\/td>\n<td>Every call is tied to a real person and the agent acting for them. Tools see the user, not a shared service account.<\/td>\n<td>Works with your existing identity provider \u00b7 Per-user access to each tool \u00b7 No raw API keys on laptops<\/td>\n<td>G6<\/td>\n<\/tr>\n<tr>\n<td>Governance<\/td>\n<td>Nothing runs unless your policy allows it, and the policy is checked on every call, not once at sign-off.<\/td>\n<td>Default-deny tool access \u00b7 Different tool sets for each team \u00b7 Approval step for risky actions<\/td>\n<td>G5<\/td>\n<\/tr>\n<tr>\n<td>Inspection<\/td>\n<td>Calls and results are checked for hidden instructions, changed tools and sensitive data on its way out.<\/td>\n<td>Prompt-injection detection \u00b7 Alerts when an approved tool changes \u00b7 Masks or blocks sensitive data<\/td>\n<td>G7<\/td>\n<\/tr>\n<tr>\n<td>Audit<\/td>\n<td>A complete, searchable record of what every agent did, for whom and why.<\/td>\n<td>Every call logged with its verdict \u00b7 Sends to your SIEM \u00b7 Evidence ready for auditors<\/td>\n<td>G9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ul>\n<li>Link under the tabs: Explore the platform \u2192<\/li>\n<\/ul>\n<h3>6.5 How it works<\/h3>\n<ul>\n<li>Eyebrow: HOW IT WORKS<\/li>\n<li>Headline: Point your agents at RimSift. Everything else stays the same.<\/li>\n<li>Three numbered steps beside <strong>G2<\/strong>:<br \/>\n  1. <strong>Connect.<\/strong> Route your AI agents, MCP servers and models through RimSift. No change to the tools themselves.<br \/>\n  2. <strong>Set policy.<\/strong> Choose which teams can use which tools, and what needs approval.<br \/>\n  3. <strong>See and control.<\/strong> Every call is checked live. Safe calls carry on; risky ones are stopped or held for approval.<\/li>\n<li><strong>G4<\/strong> live call log below the steps, full width.<\/li>\n<\/ul>\n<h3>6.6 The gaps we close<\/h3>\n<ul>\n<li>Eyebrow: WHY RIMSIFT<\/li>\n<li>Headline: Eight gaps today&#8217;s tools leave open.<\/li>\n<li>4 \u00d7 2 grid of small cards (icon, title, one line), each linking to its row on \/why-rimsift\/:<br \/>\n  1. <strong>Nobody watching the agent:<\/strong> approved agents act with no one checking each call.<br \/>\n  2. <strong>Tools that change after approval:<\/strong> a tool&#8217;s description is rewritten and the agent follows it.<br \/>\n  3. <strong>Hidden instructions:<\/strong> text inside a document or web page tells the agent what to do.<br \/>\n  4. <strong>Harmless steps, harmful total:<\/strong> each action looks fine; together they leak data.<br \/>\n  5. <strong>Human or agent?<\/strong> Logs can&#8217;t show who really did what.<br \/>\n  6. <strong>Shadow AI:<\/strong> staff paste company data into AI tools you never approved.<br \/>\n  7. <strong>Data walking out:<\/strong> sensitive data leaves inside a prompt or tool call.<br \/>\n  8. <strong>No proof for auditors:<\/strong> no record of what the AI did, or why.<\/li>\n<\/ul>\n<h3>6.7 Where it runs<\/h3>\n<ul>\n<li>Headline: Wherever your agents work.<\/li>\n<li>Three cards with <strong>G11<\/strong>: <strong>Hosted gateway<\/strong> (for AI apps and remote MCP servers) \u00b7 <strong>Workstation<\/strong> (for coding agents and local tools on laptops) \u00b7 <strong>Browser<\/strong> (for ChatGPT, Claude, Gemini and Copilot on the web). Line beneath: &#8220;One policy, three places, one audit trail.&#8221;<\/li>\n<li><strong>G13<\/strong> integration strip below.<\/li>\n<\/ul>\n<h3>6.8 Built for regulated and sovereign environments<\/h3>\n<ul>\n<li>Headline: Your data stays where you decide.<\/li>\n<li>Body: Run RimSift in the UK, the EU or inside your own cloud. Prompts and tool data are inspected in the region you choose, and nothing is sent to a third-party service for checking.<\/li>\n<li>Three small stats-style blocks (text, not numbers): &#8220;UK and EU hosting&#8221; \u00b7 &#8220;Self-hosted option&#8221; \u00b7 &#8220;Fail-closed by default&#8221;.<\/li>\n<\/ul>\n<h3>6.9 Customer quote (hidden until real)<\/h3>\n<p>One large pull-quote on signal-dim background, name, role, company logo. Design it; leave it switched off.<\/p>\n<h3>6.10 FAQ (four questions, accordion)<\/h3>\n<p>Use the first four questions from section 9.4.<\/p>\n<h3>6.11 Latest<\/h3>\n<p>Three newest items from Resources, <strong>G16<\/strong> cards. Hidden if fewer than three.<\/p>\n<h3>6.12 Closing band<\/h3>\n<p>Standard closing call-to-action band (section 5).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Draft copy imported from the RimSift designer handover. Codes such as G4 refer to the graphics list. Text in [square brackets] is a placeholder or an open decision. Replace this block with the designed layout. Page title (browser tab): RimSift | The control point for agentic AI Meta description: RimSift checks every AI tool call [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1000","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/pages\/1000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/comments?post=1000"}],"version-history":[{"count":1,"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/pages\/1000\/revisions"}],"predecessor-version":[{"id":1341,"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/pages\/1000\/revisions\/1341"}],"wp:attachment":[{"href":"https:\/\/rimsift.com\/index.php\/wp-json\/wp\/v2\/media?parent=1000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}