RiskMandate v1.0.0
Partners

The risk-acceptance layer for the agent-detection ecosystem.

A large, well-funded field is solving the hard problem of seeing what agents do — their behaviour, their decisions, the control plane. RiskMandate doesn't compete there. We sit on top: the layer that turns those findings into owned, accepted business risk — which is what actually gets fixes funded.

Where we sit

We don't detect. We don't remediate. We make the business own the risk.

Partners · well-funded field
Detection & control plane
Seeing what agents do — behaviour, decisions, the control plane.
RISK MANDATE
Risk acceptance & accountability
Turn a finding into an owned decision: the graph, the toxicity, the stakeholder who holds the permission, and a time-bound accept-fund-or-fix.
Partners · referred out
Remediation & enforcement
Going inline and changing systems. When the question is "how," we point to a partner.

Detection tells you what is happening. RiskMandate makes the business own it — and ownership is what drives the funding and energy to actually fix things.

Two areas of operation

Complementary by design, in both directions.

We send partners new business through referral, and we strengthen the case for the products they already sell by deepening their risk analysis. They keep the client relationships and the detection and remediation we don't want. Nobody is competing for the same ground.

Area 1
Partner enablement
We take a partner's finding and add the depth it lacks — the graph, the propagation, the toxicity, the owners — so the partner can make a far stronger business case to the buyer.
Area 2
Marketplace referral
When a customer asks how to detect or remediate, the answer is a partner, not a RiskMandate product. We maintain a small, curated set of recommendations and drive new business their way.
Area One · worked example

One finding, deepened into a business case.

A partner already detected something. On its own it's a line in a report. Watch RiskMandate turn it into a decision the business will fund.

Detected by partner
agent.invoice-processing is opening an external SMTP connection.
+ blast-radius graph
RiskMandate adds
Reaches vendor-master data and the payment-approval queue, one hop from three downstream services.
+ toxicity
RiskMandate adds
Untrusted input · sensitive data · exfiltration path = 3/3 lethal trifecta. Immediately exploitable.
+ ownership
RiskMandate adds
Permission owner: VP Finance. Mandate: none. Now there's a name accountable for the decision.
=
The business case
A 3/3 agent with no mandate, one hop from payment approval, owned by VP Finance. Accept for one week against a funded fix — or revoke. Here is the cost, the owner, and the deadline.
↳ the partner takes this to the buyer

The partner keeps the client relationship. We just made their finding impossible to ignore.

Area Two · recommendation format

When the question is "how," we point out.

RiskMandate isn't in the business of detection or remediation. Our work raises those questions constantly — and the honest answer is a partner. Recommendations are curated for fit, never pay-to-play.

"How do we see what our agents are actually doing?"
We point you to
Agent behaviour & decision detection · runtime control-plane partners
curated for fit
"How do we enforce or remediate this inline?"
We point you to
Inline enforcement & remediation partners
curated for fit

The candidate shortlist and ranking criteria are being defined — kept transparent and honest by design.

Open source · no lock-in

The easiest integration point in the stack.

Because the technology is open source with no lock-in, a partner can adopt as much or as little as suits them, integrate at their own pace, and never fear being trapped. That's a far lower barrier than any closed product.

Add only what fits your stack — nothing forced.
Integrate at your own pace, on your own infrastructure.
No lock-in — take the graph and toxicity depth, leave the rest.
You keep the client relationship. We stay out of it.
Complementary, not competitive

Let's make your findings impossible to ignore.

Bring the detection and the client relationship. We'll bring the graph, the toxicity, and the owner — and send business your way.