Vigilbase OS is a security operating system for your organisation. It connects to the security and IT tools you already use, keeps an evidence-backed model of your environment, investigates what it finds, proposes exact fixes, runs them only after a person approves, and then checks that each fix worked.
How it works
- Connect. You connect providers such as Cloudflare, Microsoft Entra ID or CrowdStrike Falcon. You can always connect read-only. Write access for response actions is something you grant explicitly, and it never authorises an action on its own.
- Model. Vigilbase normalises events and inventory into one model of your organisation: people, identities, devices, applications, cloud resources, controls and how they relate. This is the Security Fabric.
- Detect and investigate. Detections and posture checks run over that model. Findings open investigations that collect evidence, hypotheses and notes in one place.
- Propose. A fix is an action plan: the exact steps, targets and changes, with the evidence, blast radius and how it will be verified.
- Approve. Nothing changes in your providers until an authorised person approves that exact plan. Your policy decides who may approve what.
- Verify. After execution, Vigilbase checks that the change persisted, that it had the intended security effect and that it did no harm. See Verification.
Vigil, the Vigilbase agent, has no write tools. It can read evidence and help investigate, but only the action runtime can change a provider, and only for an approved plan.
How OS relates to Vigilbase One
Vigilbase OS is a separate product from Vigilbase One. It runs at https://os.vigilbase.com with its own data, connections and navigation. It does not share a database with One: connections you add in OS do not appear in One, and One data does not appear in OS.
You sign in to OS with your Vigilbase account through Vigilbase Identity, which also owns your organisations, invitations and account security. Vigil, the Vigilbase assistant, is the same agent you may know from One.
Preview status
Vigilbase OS runs in production at https://os.vigilbase.com, but it is pre-release:
- Connectors are being validated against real customer tenants. Every connector is tested against recorded provider data. Validation against live tenants is still in progress, so some datasets may be incomplete or behave differently from what is described here. The integrations catalogue shows each connector's maturity.
- Vigil chat in OS is coming soon. Asking Vigil questions from inside OS is not switched on yet.
- Features and labels may change before general availability.
Missing or delayed data is shown as incomplete, never as healthy. If a page says coverage is unknown or degraded, treat it that way.