Frequently Asked Questions

Greymatter.io is a Zero Trust runtime security platform for apps, APIs, and AI agents. Greymatter.io checks who is calling, encrypts the connection, and inspects what the request carries before it reaches the app. Every request and every settings change is recorded.

A Zero Trust runtime security platform secures apps, APIs, and AI workloads while they run. Security happens the moment a request is made, not after the damage is done. Greymatter.io verifies, encrypts, inspects, and records each request in one product.

Greymatter.io includes a mesh, but Greymatter.io is a Zero Trust runtime security platform. Identity, a WAF, AI Guardrails, an App, API & AI Gateway, Forensic Auditing, and GitOps Automation come in the same product.

Greymatter.io is built for defense, national security, financial services, and telecommunications teams.

Greymatter.io enforces Zero Trust at each workload, not only at the gateway. Greymatter.io encryption is FIPS 140-3 validated (CMVP #5191), and post-quantum encryption is on by default. GigaOm names Greymatter.io a Radar Leader and Outperformer, 4+ years.

Greymatter.io includes seven features in one platform:

• WAF: Spot web attacks. Block when ready.
• App, API & AI Gateway: Route and control API and AI traffic.
• AI Guardrails: Keep AI prompts and answers in bounds.
• Mesh: Encrypt the links between services.
• Forensic Auditing: Prove who did what, and when.
• Identity: Verify users, workloads, and AI agents.
• GitOps Automation: Review changes first. Zero downtime.

No. Greymatter.io bundles security, automation, and observability into one plan. There is nothing extra to buy.

Yes. Greymatter.io works alongside the gateway tools you already run, with no rip and replace.

Yes. Greymatter.io keeps security rules in Git, where a teammate reviews each change. Approved changes go live with zero downtime. Greymatter.io runs with Flux or Argo CD.

We offer enterprise support, with written fix deadlines by severity, quarterly security patches, and 3 years of support per version.

Yes. Greymatter.io encryption is FIPS 140-3 validated under NIST CMVP certificate #5191, at Overall Level 1. The certificate is active through August 2029.

Yes. Greymatter.io turns post-quantum encryption on by default, even in the FIPS 140-3 builds. The Console shows how many connections used post-quantum encryption, per service.

Yes, we adhere to:

• NIST Zero Trust
• FIPS 140-3 validated (CMVP #5191)
• DoD Impact Levels 2–6+

Yes. Greymatter.io supports DoD Impact Levels 2 through 6+.

Greymatter.io gives each app its own security checkpoint, so a breach in one app stays in that app. Once enforcement is on, only verified callers reach a service.

Greymatter.io records every request and every settings change, so evidence builds while the platform runs. One customer saw 62% faster audits.

The Greymatter.io Forensic Audit page covers the last 24 hours, 7 days, or 30 days. Changes made by people stay in the change log for 395 days.

Greymatter.io gives each AI agent its own identity. AI Guardrails checks AI and agent traffic for the OWASP Top 10 for LLM applications, tool misuse, and MCP calls. Forensic Auditing records which person an agent acted for.

Yes, once enforcement is on. Greymatter.io AI Guardrails catches prompt injection in AI traffic. New rules start in watch-only mode, so you see what would be blocked before you turn blocking on.

Yes. Greymatter.io AI Guardrails reads MCP calls, including calls on event streams. MCP clients find how to sign in through standard OAuth discovery.

Yes. Greymatter.io data loss protection flags card and bank numbers, health data, and classification markings. Data loss protection records findings and never blocks.

Greymatter.io runs on Kubernetes, OpenShift, RKE2, and AWS EC2, including fully offline networks.

Yes. Greymatter.io runs on fully offline networks. Disconnected clusters pull Greymatter.io images from a private registry you control, and the documentation ships with the platform.

Greymatter.io installs with Helm or OLM on Kubernetes, OpenShift, and RKE2, on amd64 and arm64. Label a group of apps, and Greymatter.io brings them under protection.

Yes. The Greymatter.io WAF starts in detection mode and shows what would have been blocked. Your team turns on blocking when ready, system by system.

The Greymatter.io Console shows health, security, and traffic for every service, plus a forensic record of every request. If something cannot be read, it shows as unknown, never as healthy. You can also use the Prometheus you already run.

Contact us for a demo, access our documents, and begin onboarding with guided deployment and support. We offer the ability to start for free.

We offer the Greymatter.io documentation, API guides, and support from our engineers. The documentation ships with the platform, so your team can reach it even on fully offline networks.

Request a live demo or watch recorded presentations on Greymatter.io’s capabilities.