Security & Trust
Built to be trusted with the floor.
Spektro sits next to the most critical systems you run. So it is built on a simple principle: Waz reads and reasons, humans approve and act. The agent has no ability to change your infrastructure, and every conclusion is traceable to the data behind it.
Read-only by design
Waz never writes to your infrastructure
Every integration is connected with read-only credentials. Waz ingests telemetry, logs, and your source of truth, correlates them, and reasons over them. It does not push config, restart services, or change state. There is no path from the agent to a write action, by design, not by policy.
Human-in-the-loop
Operators approve and act, every time
Waz produces the diagnosis, the root cause, and the drafted SOP or MOP. A human reviews it and decides what runs. Procedures execute in your own tools, under your own change control. Nothing leaves the review queue without an operator.
Fully auditable
Every action is logged
Each investigation ships with its evidence bundle: the alerts correlated, the records queried, the reasoning, and the artifact produced. You can trace any conclusion back to the data that produced it. Nothing the agent does is a black box.
Data sovereignty
Your data stays in your environment
Spektro is an agentless intelligence layer. We hold read-only integration metadata required for triage, never a copy of your infrastructure. We do not sell data, and we do not train shared models on your operational data.
[01] Data protection
All data is encrypted with AES-256 at rest and TLS 1.3 in transit. Secrets and integration credentials are stored in a managed key-management service and scoped to least privilege. Access to customer data is restricted to authorized systems and is never stored on employee workstations.
[02] Access & integrations
Spektro connects to your stack through standard APIs with read-only scopes. Nothing requires an agent installed on your hosts.
- Monitoring & logs: read-only access to metrics and log sources (Prometheus, Netdata, Datadog, and others).
- Source of truth: read-only access to inventory and topology (NetBox and similar) for correlation.
- Action surfaces: drafted SOPs, MOPs, and tickets are handed to your tools for a human to run. Spektro does not execute them.
[03] Explainability
Trust in an autonomous system comes from being able to check its work. Every Waz investigation exposes the full chain: which signals fired, which records it pulled, how it correlated them, and why it reached its conclusion. Operators see the reasoning, not just the answer, so the agent earns trust the same way a good engineer does.
[04] Compliance
Spektro is built around the controls enterprise data center operators expect: least-privilege access, encryption in transit and at rest, audit logging, and a read-only operating model that removes the highest-risk failure mode entirely. For details on our compliance posture or to request documentation, get in touch.
[05] Questions
Security review, vendor assessment, or a specific control you need to verify? Reach us at omar@getspektro.com or contact our team.