# SovereignAI Security Labs (SOAISEC Labs)

> Full-stack GenAI security platform for regulated industries

## About

SovereignAI Security Labs (SOAISEC Labs) builds enterprise-grade GenAI security products for banks, insurers, critical infrastructure, and sovereign environments. Headquartered in India, we protect organizations from emerging AI threats while ensuring compliance with global regulatory frameworks including GDPR, EU AI Act, RBI, SEBI, and IRDAI guidelines.

## Products — SentraSuite Platform

### AIThreatIntel
AI-powered threat intelligence engine focused on AI-specific risks. Aggregates, enriches, and prioritises vulnerabilities and threats from 25,000+ CVEs including 500+ AI-related CVEs. Classifies threats across MCP (14 CVEs), Agentic AI (179 CVEs), and RAG (109 CVEs) technologies.
- URL: https://sovereignaisecurity.com/products/aithreatintel
- Status: Generally Available
- Live Demo: https://aithreatintel.sentrasuite.com

### SentraRed
AI red teaming and adversarial testing platform for enterprises. Performs structured red teaming on LLMs and agentic systems to understand how AI systems behave under pressure. Tests for jailbreaks, prompt injection, data leakage, and compliance violations.
- URL: https://sovereignaisecurity.com/products/sentrared
- Status: Generally Available
- Live Demo: https://sentrared-demoapp.sentrasuite.com

### SentraScan
AI supply chain security scanner. Identifies vulnerabilities, malicious code, and compliance risks in AI models, datasets, and dependencies before deployment. Includes build-time discovery and inventory of AI models, AI agents, agent skills, and shadow AI.
- URL: https://sovereignaisecurity.com/products/sentrascan
- Status: Generally Available

### SentraGuard
Unified GenAI and agentic AI security and observability platform spanning browser, IDE (Cursor / VS Code / Copilot), programmatic / API, and endpoint / host agent surfaces — connected to a centralized, API-first, CPU-only backend. Provides DLP, jailbreak detection, prompt injection evaluation, file upload moderation, runtime AI discovery and shadow AI detection, and policy enforcement wherever GenAI is used. Deployable on Kubernetes, cloud, or on-prem (including air-gapped environments).
- URL: https://sovereignaisecurity.com/products/sentraguard
- Status: Generally Available
- Live Platform: https://sentraguard.sentrasuite.com
- Developer packages:
  - PyPI: sentraguard-sdk (pip install sentraguard-sdk) — https://pypi.org/project/sentraguard-sdk/
  - PyPI: sentraguard-agent (pip install sentraguard-agent) — runtime agent governance — https://pypi.org/project/sentraguard-agent/
  - npm: @sentraguard/sdk (npm install @sentraguard/sdk) — https://www.npmjs.com/package/@sentraguard/sdk

### SentraTMap
AI threat modeling tool for mapping attack surfaces of AI systems.
- Status: Pilots

### SentraViz
Runtime AI discovery and inventory for AI models and shadow AI.
- Status: Coming Soon

## Solutions

### GenAI Security
Solution coverage for prompt injection, RAG, and model-layer threats across LLM deployments.
- URL: https://sovereignaisecurity.com/solutions/genai-security

### Agentic AI Security
Solution coverage for agent hijacking, MCP session exploits, and tool misuse across agentic AI pipelines.
- URL: https://sovereignaisecurity.com/solutions/agentic-ai-security

### GCC Region
SentraSuite GCC Edition — AI security and governance tailored for UAE, KSA and the wider Gulf. Aligned with CBUAE, ADGM, DFSA, UAE PDPL, SAMA CSF, NCA ECC, KSA PDPL, ISO/IEC 42001 and NIST AI RMF.
- URL: https://sovereignaisecurity.com/solutions/gcc-region

### SentraSuite by Region & Industry
Data-driven solution page showing SentraSuite tailored for any combination of 5 regions (GCC, Europe, India, USA & UK, SEA / Singapore) and 4 industries (Generic, Healthcare, Banking & Finance, Oil & Gas). Each combination reflects the relevant regulators and frameworks for that region and sector.
- Base URL: https://sovereignaisecurity.com/solutions/sentrasuite/{region}/{industry}
- Regions: gcc, europe, india, usa_uk, sea_sg
- Industries: generic, healthcare, banking, oil_gas
- Regulatory coverage per region:
  - gcc: NCA ECC, SAMA CSF, CBUAE, DFSA, UAE PDPL
  - europe: GDPR, EU AI Act, NIS2, DORA, EBA, ECB
  - india: DPDP Act, SEBI AI-ML, RBI, CERT-In, MeitY, IRDAI
  - usa_uk: NIST AI RMF, CCPA, SOC 2, HIPAA, FTC, SEC, FCA, ICO, UK GDPR, UK AI Act
  - sea_sg: PDPA, MAS AI / FEAT, IMDA, ASEAN AI, OJK, BSP
- Example URLs:
  - https://sovereignaisecurity.com/solutions/sentrasuite/gcc/generic
  - https://sovereignaisecurity.com/solutions/sentrasuite/europe/banking
  - https://sovereignaisecurity.com/solutions/sentrasuite/india/healthcare
  - https://sovereignaisecurity.com/solutions/sentrasuite/usa_uk/oil_gas
  - https://sovereignaisecurity.com/solutions/sentrasuite/sea_sg/banking

## Target Industries
- Banking & Financial Services (BFSI)
- Insurance
- Telecom
- Public Sector & Government
- Defense & National Security
- Critical Infrastructure

## Key Differentiators
- Deep security specialisation for probabilistic AI systems
- Domain-specific security controls for regulated industries
- Enterprise-grade compliance (GDPR, EU AI Act, RBI, SEBI, IRDAI)
- Supports on-premise and air-gapped deployments
- Modular architecture — start with one module and expand
- API-first design with MCP (Model Context Protocol) integration
- Multilingual and multimodal security approach

## Memberships & Partnerships
- DSCI (Data Security Council of India) — Member
- N-CoE (National Centre of Excellence for Cybersecurity Technology Development) — Member
- CoSAI (Coalition for Secure AI) — Member
- Google Cloud Partner Network — Member
- ZeroDark24 — AISecurity BFSI Partner

## Contact
- Website: https://sovereignaisecurity.com
- Email: info@sovereignaisecurity.com
- LinkedIn: https://linkedin.com/company/sovereignaisecurity
- Location: India