Every action, decided
Each read, write, and tool call is checked against Cedar policy, the person’s context, and the data’s sensitivity, not just at sign-in.
awzy
Per-action, per-resource authorization for people and AI agents, installed in your own cloud.
People and agents alike
An AI agent acting for someone gets at most what that person could do, and each is judged on its own risk.
Challenges, not just denials
A risky request can ask for a justification, a security key, or an approval instead of failing outright.
In your cloud
Single-tenant in your own cloud account. awzy has no access to your data; your install pulls signed releases.