Knox unifies the dozen tools our technicians juggle every day into a single place to look, think, and document — powered by AI that runs inside our own walls.
Our techs don't lack skill. They lack a single place to find what they already know. The cost shows up everywhere: repeated questions, missed renewals, slow tickets, and patterns across clients we never notice until they become problems.
Type a client name. See everything that matters about them. Ask Knox a question and it pulls the answer from whichever system actually has it. Resolve a ticket and Knox offers to write the documentation for you.
One box. Every system. Semantic search that understands what you mean, not just what you typed.
Resolve a ticket, click once, get a draft KB article. Edit, publish back to the right place.
Knox flags tickets that resolved without matching documentation — every gap becomes a queue item.
Tenant type, MFA, license mix, recent activity, risk trend, what's coming due. At a glance.
Knox is what techs see. Underneath is a layered platform that makes new capabilities cheap to add. Each layer has one job. The Privacy Boundary is non-negotiable: nothing identifying crosses it without being tokenized first.
Concerns about AI seeing client data aren't a constraint to work around — they're the architectural foundation. Knox is built so that nothing identifying ever leaves our network, and the most sensitive analysis never leaves our hardware.
Client names, hostnames, emails, IPs — all replaced with stable anonymous tokens before any external AI call. The mapping never leaves our key store.
Sensitive workloads — security incidents, anything touching credentials or PII — run on a 4-GPU local AI server. Never leaves the building. Ever.
Knox has no public DNS, no internet-facing ports. Every connection — technicians, dashboards, anything — runs through our private Netbird mesh. From the office, from home, from a client site: same private network.
Knox has no live connection to Passportal. Credentials never enter the AI pipeline. Documentation may be exported once as a seed for Knox's own KB; after that, all new docs land in Knox.
External AI services run on contractual no-training tiers. Documented vendor agreements, not handshake assurances.
Every AI call is logged: what was sent, what came back, who triggered it. Reviewable, reportable, defensible.
Stable tokens mean Knox can still cluster, score, and trend across clients — privacy doesn't cost us insight.
The platform is modular by design. Phase 0 lays the foundation. Phase 1 puts Knox in techs' hands. Every phase after adds capability without breaking what came before. Nothing requires a big-bang launch.
Boring, well-supported, internally hostable. Python everywhere so two engineers can work on any part without context-switching. Nothing exotic; nothing we can't replace.
Other languages permitted for one-off tools and experiments. The platform standardizes.