# Vane Security

> Vane is an AI gateway: the single point between a company and every AI provider it uses. It checks each AI request, removes sensitive data, controls cost, and keeps audit-ready evidence. The product is "Vane"; the company and website are "Vane Security" (https://vanesecurity.com). Vane Security is a Liftoff Ltd. company based in Ramat HaSharon, Israel.

## What Vane does
- Plain-English policies: scope by team, agent, person, model or MCP server; actions are allow, redact, warn, block or require approval. Policies start in Monitor mode.
- Sensitive-data redaction before the call leaves: email, phone, card numbers (Luhn), IBAN (mod-97), US SSN, Israeli ID (check digit), API keys, private keys, JWTs, passwords. Values are never stored. Responses are scanned too.
- Cost control: budgets for organization, team, agent and person; alerts at 80%, hard stop at 100%; prompt caching, answer reuse and lower-model routing, each set to Monitor, On, Off or Inherit.
- Agent map: which agents run on the network, who owns them, which models and MCP tools they call, and which agents talk to each other. Unowned agents are flagged.
- Approvals: holds a request and sends a push notification to the approver on the Vane iPhone app.
- Audit: hash-chained, tamper-evident trail of policy decisions and admin actions; evidence mapped to SOC 2 and ISO/IEC 27001 Annex A; privacy aligned to ISO/IEC 27701. Daily reports as PDF, video or podcast.

## How it is deployed
- Runs inside the customer's network (Docker). Apps and agents change their base URL to Vane; no other code changes.
- Streams responses through; fail-open by default, fail-closed per policy.
- Content capture is off by default; when on, content is encrypted.
- Eight built-in roles from viewer to admin; break-glass access is logged by name.

## Who it is for
CISOs and security teams, CFOs and FinOps, CTOs and platform teams, compliance teams.

## Key pages
- [Home](https://vanesecurity.com/): overview, live demo animations, FAQ
- [Platform](https://vanesecurity.com/#platform)
- [Security](https://vanesecurity.com/#security)
- [FAQ](https://vanesecurity.com/#faq)
- [Contact](https://vanesecurity.com/#contact): info@vanesecurity.com
- [Accessibility statement](https://vanesecurity.com/accessibility.html): IS 5568 / WCAG 2.0 AA