Platform

How KXCO fits together

Everything KXCO ships stands on the same cryptography. This is the estate on one page: what is free, what is licensed and what each piece is for.

Free, and deliberately so

Sixteen packages on npm under Apache-2.0. They give you the primitives, a lint rule that fails your build if someone reaches for a raw one, a hardware boundary for keys, and a scanner that reads your JavaScript lockfiles and lists the dependencies that use RSA or ECDSA. That scanner, kxco-pq-scan, is also the free way into Portcullis Survey, part of KXCO Portcullis.

None of these packages makes network calls to KXCO, and none of them needs KXCO to run. You can audit all of it before you rely on any of it, which is why we publish it this way.

Licensed products

KXCO Round Table sits at the centre. KXCO Portcullis, KXCO Sovereign, KXCO Guildhall and KXCO Hanse (in development) are the commercial lines. KXCO Herald and KXCO Armature are the foundations.

  • Portcullis, a commercial line. Portcullis Muster assesses AI agents before they are trusted with work. It scores an agent's declared posture and does not enforce what the agent may do.

  • Sovereign, a commercial line. Sovereign runs the economic operating system. Licensed institutions hold assets. KXCO supplies the software.

  • Armature, a foundation. Armature L1 has used ML-DSA-65, the post-quantum signature algorithm specified in NIST FIPS 204, since its first block.

They are separable. You can license one without the others, and each still stands on the same core.

Round Table sits at the centre. It keeps an ontology: a data model of entities and their relationships.

Round Table Ontology is the output you can see, and it has its own page. Round Table is the software that produces it. The software is not available publicly, and there is no free tier and no waiting list. We do not publish the Round Table software, our private graphs or the detail of our method. Keeping each customer's knowledge under its own control is what we sell, and we apply the same rule to our own.

What is public is a demonstration. The Round Table Live map runs on public data only. In a private deployment, what Round Table finds in your own books stays inside your deployment.

See the packagesThe productsDeveloper docs