omniaGladius™

Sovereign lightweight agent. Single binary. Feeds omniaSentinel•, omniaVigilo•, and custodia• simultaneously. HEC-compatible and ECS-compatible compatible. The intelligence layer for the entire omniaSphere platform.

Request Access Enterprise deployments · Questions? steven.hasson@omniapan.ai

The Problem

Every tool deploys its own agent.

EDR platforms deploys a sensor. open-source SIEM agents deploys an agent. vulnerability scanner agents deploys an agent. enterprise SIEM platforms deploys a forwarder. A typical enterprise endpoint runs four to seven separate agents, each consuming memory, each requiring updates, each creating a management surface.

For sovereign security operations, the problem is worse — each agent ships data to a different cloud service you do not control. The endpoint becomes a telemetry broadcast tower for third-party infrastructure.

Single binary — under 5MB RAM footprint

Feeds omniaSentinel, omniaVigilo, and custodia• simultaneously

mTLS-authenticated — no unencrypted telemetry

How It Works

One agent. Every product. Your infrastructure.

omniaGladius is a single Go binary deployed as a systemd service. It authenticates to the omniaSphere platform via mTLS and ships three streams simultaneously: compliance telemetry to omniaSentinel•, security events to omniaVigilo•, and evidence artifacts to custodia•.

The agent is YAML-configured. Tenants control exactly what data ships, at what frequency, and to which endpoints. The configuration is signed and version-controlled.

Data Flow

systemd Service

→

mTLS Auth

→

omniaSentinel Stream

→

omniaVigilo Stream

→

custodia• Evidence

Compatibility

Pluggable to any SIEM or webhook.

omniaGladius ships in MSSP Mode 2 — a pluggable output mode that formats telemetry as HEC-compatible events or ECS-compatible events. Organizations with existing enterprise SIEM platforms or log aggregation platforms infrastructure can receive omniaGladius telemetry without replacing their SIEM.

Webhook output mode allows omniaGladius to ship to any HTTP endpoint — custom SIEMs, SOARs, ticketing systems, or data lakes.

<5MB

RAM footprint

Simultaneous output streams

Cloud dependencies