Frequently asked questions

Greymatter is a Zero Trust runtime security platform for apps, APIs, and AI agents. Greymatter verifies who is calling, encrypts the connection, and inspects what the request carries before it reaches the app. Greymatter records every request and every settings change.

Greymatter is the Zero Trust runtime security platform. Greymatter.io is the company that builds, sells, and supports it.

A Zero Trust runtime security platform secures apps, APIs, and AI workloads while they run. Protection starts the moment a request arrives, before any damage. Greymatter verifies, encrypts, inspects, and records each request in one platform.

Greymatter includes a mesh, but Greymatter is a Zero Trust runtime security platform. An App, API & AI Gateway, Identity, a WAF, AI Guardrails, Forensic Auditing, and Stoplight Measurement come in the same platform.

Defense, national security, and civilian government programs use Greymatter. The platform is also built for private sector teams that run systems that cannot fail.

Greymatter enforces Zero Trust at each workload, not only at the gateway. Greymatter encryption is FIPS 140-3 validated (CMVP #5191), and post-quantum encryption is on by default. GigaOm names Greymatter.io a Radar Leader and Outperformer, 4+ years.

No. Keep them. Those tools guard the way into your network. Greymatter secures what happens inside, between apps, APIs, and AI agents.

Greymatter includes many capabilities in one platform:

• App, API & AI Gateway: Route and control API and AI traffic.
• Mesh: Encrypt the links between services.
• Identity: Verify users, workloads, and AI agents.
• WAF: Spot web attacks. Block when ready.
• AI Guardrails: Keep AI prompts and answers in bounds.
• Forensic Auditing: Prove who did what, and when.
• Stoplight Measurement: See your security score, live.

No. Greymatter bundles security, automation, and observability into one plan. There is nothing extra to buy.

Yes. Greymatter works alongside the gateway tools you already run.

Yes. Greymatter keeps security rules in Git, where a teammate reviews each change. Approved changes go live with zero downtime. Greymatter runs with Flux or Argo CD.

Greymatter.io offers enterprise support, with written fix deadlines by severity, quarterly security patches, and three years of support per version.

Yes. Greymatter encryption is FIPS 140-3 validated (CMVP #5191), at Overall Level 1. The certificate is active through August 2029. Post-quantum encryption is on by default.

Yes. Greymatter turns post-quantum encryption on by default, even in FIPS mode. The Console shows how many connections used post-quantum encryption, per service.

Greymatter meets these security standards:

• NIST Zero Trust
• FIPS 140-3 validated (CMVP #5191), with post-quantum encryption on by default
• DoD Impact Levels 2–6+
• OWASP Core Rule Set
• OWASP Top 10 for LLM applications

Yes. Greymatter supports DoD Impact Levels 2 through 6+.

Greymatter gives each app its own security checkpoint, so a breach in one app stays in that app. Once enforcement is on, only verified callers reach a service.

Greymatter records every request and every settings change, so evidence builds while the platform runs. One customer saw 62% faster audits.

The Greymatter Forensic Audit page covers the last 24 hours, 7 days, or 30 days. Changes made by people stay in the change log for 395 days.

Greymatter gives each AI agent its own identity. AI Guardrails screens AI and agent traffic for the OWASP Top 10 for LLM applications, tool misuse, and MCP calls. Forensic Auditing records which person an agent acted for.

Yes, once enforcement is on. Greymatter AI Guardrails catches prompt injection in AI traffic. New rules start in detection mode, so you see what Greymatter would block before you turn blocking on.

Yes. Greymatter AI Guardrails reads MCP calls, including calls on event streams. MCP clients find how to sign in through standard OAuth discovery.

Yes. Greymatter DLP (data loss prevention) flags card and bank numbers, health data, and sensitive markings. DLP records findings and never blocks.

Greymatter runs on Kubernetes, OpenShift, RKE2, k3s, and k0s, in the cloud, on premises, and on fully offline networks.

Yes. Greymatter runs on fully offline networks. Disconnected clusters pull Greymatter images from a private registry you control, and the documentation ships with the platform.

Greymatter installs with Helm or OLM on Kubernetes, OpenShift, and RKE2, on amd64 and arm64. Label a group of apps, and Greymatter brings them under protection.

Yes. The Greymatter WAF starts in detection mode and shows what would have been blocked. Your team turns on blocking when ready, system by system.

The Greymatter Console shows health, security, and traffic for your services, plus a forensic record of requests. If something cannot be read, it shows as unknown, never as healthy. You can also use the Prometheus you already run.

Start for free on your own systems, or contact us for a demo. Greymatter supports onboarding with guided deployment and engineer support.

Greymatter provides full documentation, API guides, and support from its engineers. The documentation ships with the platform, so your team can reach it even on fully offline networks.

Request a live demo with our security experts, or watch recorded sessions in the Resource Center.

Agencies can buy Greymatter through Carahsoft, NASA SEWP V, NASPO ValuePoint, ITES-SW2, and the Tradewinds Solutions Marketplace.