HookBus Enterprise

One licence. Five subscribers.
A HookBus for enterprise workloads.

HookBus Enterprise bundles the five commercial subscribers regulated enterprises actually need, running on a bus built for production: hot-reload, failover groups, advanced consolidation, SLA, dedicated support.

Closed-source. On-premise or VPC. Air-gap compatible. No cloud dependency.

Five commercial subscribers. One licence.

HookBus Enterprise ships with CRE-AgentProtect Enterprise, Auditor, DLP Filter, KB Injector, and Session Memory. Covered by one commercial licence. One SLA. One escalation path. Pick the ones you need, turn the others off.

Included with HookBus Enterprise

  • Five licensed subscribers
  • Closed-source commercial licence
  • On-prem, VPC, or air-gap deployment
  • SLA and dedicated support
  • Named escalation path
  • Hot-reload, failover groups, advanced consolidation
Enterprise · Commercial

CRE-AgentProtect Enterprise

Deterministic + semantic policy gate

Returns approve or deny on every tool call. Escalates to ask only when a rule requires human approval. Two-layer policy engine: L1 deterministic sub-10ms + L2 Granite LLM intent reasoning. The flagship enforcement subscriber.

  • Microsoft AGT backed L1
  • IBM Granite 4 backed L2, local
  • KB override + PIN escalation
  • Self-learning L2 to L1 promotion
Enterprise · Licensed

Auditor

Hash-chained audit record

SHA-256 hash-chained SQLite log of every agent lifecycle event. Tamper-evident via chain verification. CSV export per date range. Produces the event-level record your SOC 2 Type II, ISO/IEC 42001, or EU AI Act Article 12 evidence pack is built on.

  • SHA-256 tamper-evident chain
  • Chain verification built in
  • CSV export per date range
  • Evidence format your auditors can read
Enterprise · Licensed

DLP Filter

PII and secret redaction at envelope

Redacts API keys (OpenAI, Anthropic, AWS, GitHub PAT, bearer tokens, private keys), PII (UK NI, email, UK phone), financial data (credit card, IBAN), and infrastructure strings (connection strings, private IPs). 15 curated regex patterns. Bidirectional on tool_input and tool_result. Allowlist and ignore-pattern configurable.

  • 15 curated patterns, bidirectional
  • Allowlist + ignore-pattern config
  • Regulated data never leaves host
  • Hot-reload on SIGHUP
Enterprise · Licensed

KB Injector

Context injection at prompt time

Injects organisation-specific policy, compliance, and context packages into every prompt before it reaches the LLM. Rule-authoring UI. Deterministic matching. Sub-millisecond overhead.

  • Rule-authoring UI
  • Deterministic matching
  • Sub-ms overhead
  • Works with any LLM
Enterprise · Licensed

Session Memory

Durable cross-session context

Cross-session context recall with per-agent isolation and per-team retention. Dual sync and async subscriber. Postgres-backed. Audit-trail linked so memory recall itself is an auditable event.

  • Per-agent isolation
  • Per-team retention policy
  • Postgres-backed
  • Audit-linked recall

Enterprise gets a better bus, not just extra subscribers.

HookBus Enterprise is not HookBus Light with bundles bolted on. The bus itself is tuned for production: hot-reload, failover groups, advanced consolidation strategies, richer health checks, and commercial-grade support.

Capability
HookBus Light
HookBus Enterprise
Event routing, deny-wins consolidation
Included
Included
Hot-reload of subscriber config
Included
Failover groups between subscribers
Included
Advanced consolidation strategies
Included
Bundled licensed subscribers
5 included
Commercial SLA and support
Community
Included
Licence
Apache 2.0
Commercial

Built for deployments where a CISO signs a DPIA first.

Every target environment a regulated buyer will ask for, supported at day one. No architecture detour required. The product was built for this.

On-premise

Your hardware, your network

Runs entirely inside your data centre. No outbound connections required for decisions.

VPC

Your cloud, your VPC

Deploys into your AWS, Azure, or GCP VPC. Private subnets only. No public endpoint required.

Air-gap

No external calls, full stop

Both L1 and L2 decisions run locally. Granite 4 runs on CPU or your own GPU. Works fully offline.

Data residency

Your data never leaves the host

Events, memory, audit chain, policy packs all stay where you put them. No telemetry calls home.

Assurance & certification posture

Agentic Thinking Limited does not currently hold third-party compliance certifications. The products are built to the evidence standards that SOC 2 Type II, ISO/IEC 42001, and EU AI Act Article 12 require, so customers can adopt them inside their own compliance programmes today. Full security posture documentation is available under NDA — see the Trust Center.

Book a demo. Walk out knowing whether we fit.

Typical annual engagement from £300,000. Built for organisations with a CISO, a DPO, and regulators watching.