From a license for your own perimeter to full turnkey MLSec coverage. What differs is the depth of support and the SLA, the product is the same in every format.
Ballpark: an annual per-instance license. An exact quote for your perimeter at discovery.
The full product for your perimeter, with no feature cuts.
Deployment tailored to your perimeter: integrations, SLA, audit.
MLSec fully on our team: from inventory to reporting.
No SaaS. Data never crosses the bounds of your infrastructure: the whole pipeline runs inside the perimeter.
External provider APIs are switched on and off by policy. Kill-switch L3 stops the cloud while local models keep running.
Policy templates and control matrices for 152-FZ · GDPR · SOC 2, controls-as-code, tuned to your perimeter.
If support ends, the customer gets access to the code under the contract terms. The product keeps working: degrade, never brick.
Deployment, data, licensing, load and limits. Every number comes from a measured canon, and every limit is named outright.
make quickstart brings up 14 services in about 2 minutes with auto-generated secrets. For production, use Docker Compose or the Helm chart from GHCR. Air-gap is supported: offline images, zero outbound calls at install and runtime.
Data never leaves the perimeter. HA.Prizma runs fully self-hosted, with no SaaS: traffic, logs, audit and models stay inside your infrastructure. Licenses are offline, with no call-home, and the product sends no telemetry out.
Offline licenses signed with Ed25519 are verified locally, with no external servers. The "degrade, never brick" principle: on expiry the product is not locked but softly degrades to a base mode. Metering is by user and instance count.
If the goal is maximal breadth of providers and models, that is LiteLLM, and it can stay the transport behind the HA.Prizma gateway. If you need DLP inbound and outbound, traffic control and provable audit on-prem, that is our layer. Portkey is built for SaaS, so data leaves for someone else's perimeter; with us everything stays inside yours.
The full pre-call pipeline adds milliseconds to a request and does not slow the development flow, and the kill-switch fires instantly. It scales linearly across replicas; load measurements are taken for your perimeter during the pilot.
There is no formal SOC 2 audit. We provide evidence packs and controls-as-code as audit-readiness, not a certificate. Controls for 152-FZ, GDPR and SOC 2 are mapped and automated, and the evidence bundle assembles itself. We claim no Russian software registry, FSTEC or ISO.
By delivery format. STANDARD: email, next-business-day response. ENTERPRISE: 24×7 SLA, 1-hour response, priority patches and 2 days on-site. MLSEC as a Service: the HA.Prizma team runs MLSec turnkey, including an incident response retainer.
A self-hosted LLM Firewall inside your perimeter. One base_url line, and no prompt leaves directly.