Remediation + audit model

Security & Trust at Bivouac

The minutes-not-weeks MTTR promise, the on-call split that pages humans for judgment only, the audit-logged chain of patch decisions, and the NIS2 / EU CRA wording the mission leans on. The evidence is yours to replay; the certification is not ours to claim yet.

Bivouac's on-call agent watching a network of GitHub branches and dependency nodes — the audit-aware, reviewable-PR pipeline at the platform's security perimeter.

Air-gapped runner

Need a runner that stays inside your network?
Bivouac ships as a single binary on a host you control for regulated repos, air-gapped environments, and data-residency requirements where SaaS isn’t on the table. We’re piloting the self-hosted runner with a small first cohort.
  • Regulated repos
  • Air-gapped install
  • Same evidence model
Join the self-hosted waitlist

Targeting GitHub Enterprise, GitLab Self-Managed, and Bitbucket Data Center — see the install posture on the waitlist page.

Loading…