Which one do you need?

Compare

Each platform was built for a different problem, and the fastest way to tell them apart is what happens to your data and where the software sits when it runs.

Scroll sideways to see all four.

The four products compared by the problem they solve, where they run, what they connect to, and when to pick them.

Question	Ibex Air-gapped attack surface management	Marmot Sovereign AI with a gate	Goshawk Self-service code audits	Buteo External attack-surface auditing
The problem it solves	Networks, code, AI and databases that have to be secured and answered for, where no cloud service can reach them.	People need a capable assistant, but the documents cannot go to a cloud model.	Audits that are either shallow scanner runs or slow consultancy, with reports a regulator will not accept.	Nobody reviews what the domain tells the internet: a lax SPF, a subdomain left pointing at a cancelled service, a certificate expiring on a Saturday.
Where it looks	From inside your perimeter: the inside view.	At every request that could leave the building.	At the source code, before it ships.	From the internet: the outside view.
Where it runs	A sealed appliance on your hardware, inside your perimeter, with no internet connection, inbound or outbound.	Two machines on your premises. The one holding the documents has no route out.	A single-tenant application: fully managed, or hybrid with the scanning inside your perimeter.	As a service. Nothing installed, no agents, and it never touches your systems.
It connects to	A SPAN port and your network segments, your internal Git host, your databases through a dedicated account, and the models and agents in use.	Your existing document repositories and a local model, with cloud models reachable only through the gate.	Your git host, an uploaded archive or a single file, and cloud or local model backends.	Only what is public: your DNS, mail servers, certificates and web responses, for domains you have proven you own.
Pick it when	You have to answer for what runs on an isolated network, and nothing may connect it to the outside.	Some questions deserve a frontier model and others must never leave the building.	You need audits on demand, with findings you can defend and human review where it counts.	You want to know what changed on your perimeter since last week, without installing anything.

Still not obvious? Tell us the constraint you are working under, not the product you think you need, and we will say which of these applies and which does not. Talk it through