AI & Digital Transformation — xTrust Suite

xTrust by xCloud Solutions — DETECT · PREVENT · MONITOR · SOVEREIGN

XCloud Solutions xTrust suite: 4 products for the full cybersecurity + sovereign AI lifecycle. xScan finds runtime vulnerabilities with evidence, OSSFIA governs the AI-assisted SDLC, GlassPlane monitors continuous compliance, and Pirca runs regulated on-prem AI for industries in Iberoamérica where data cannot leave.

Overview

XCloud Solutions xTrust suite: 4 products for the full cybersecurity + sovereign AI lifecycle. xScan finds runtime vulnerabilities with evidence, OSSFIA governs the AI-assisted SDLC, GlassPlane monitors continuous compliance, and Pirca runs regulated on-prem AI for industries in Iberoamérica where data cannot leave.

Main Components

xScan · DETECT — Runtime pentesting with Evidence Engine v3.0

  • Evidence Engine v3.0: CVSS v4 + EPSS + safe data extraction + OOB callbacks (interactsh) + reproduction scripts
  • NIST CSF 2.0 maturity score auto-generated for cyber insurance underwriting
  • Tiers Free / Pro / Consulting — Free is a real lead magnet for Spanish-speaking SMEs
  • Carrier-compatible: format compatible with B2B2B underwriting (ADV.04 + ADV.05 in pack_cyber_insurance)
  • Live: https://xscan.xclos.com

OSSFIA · PREVENT — Multi-runtime governance harness

  • The control plane that governs AI agents in the SDLC: prompts, tools/MCP, sandboxing, orchestration, memory, hooks, permissions, observability, evals, compliance
  • 14+ supported runtimes: Claude Code, Copilot, Cursor, Codex, Devin, Aider, Cline, Roo, Zed, Warp, Jules, Factory, Amp, Junie
  • ADLC (Agentic Development Life Cycle) 10-phase F00-F10 with FABs (Fullstack Agent Builders)
  • 9 compliance packs: NIST CSF 2.0, NIST AI RMF, EU AI Act Art. 14, NIS2, ISO 42001, SOC 2 Type II, plus 3 LATAM packs
  • Live: https://ossfia.ai

GlassPlane · MONITOR — 18-dim live control plane scorecard

  • Continuous scoring across 18 dimensions vs the 9 OSSFIA cross-mapped frameworks
  • OAuth API for cyber insurance carriers (Bet 1 B2B2B): scorecard endpoint with 30-day refresh
  • Native integration with OSSFIA dim 17 work_automation_ratio (measures artifacts + infra + actual usage)
  • Consumes xScan score + Pirca Ledger audit-id as input for continuous evidence
  • Demo under NDA: contact info@xclos.com

Pirca · SOVEREIGN — Regulated on-prem sovereign AI

  • Private generative AI platform deployable on-prem for regulated industries in Iberoamérica
  • Built-in compliance: EU AI Act + ISO 42001 + SOC 2 + Habeas Data CO + LGPD BR + LFPDPPP MX + Ley 19.628 CL + 29733 PE + 25.326 AR
  • Aegis runtime DLP with LATAM-native recognizers: CC, CURP, RFC, CPF, CNPJ, RUT, DNI, CUIL (mod-11 checksums)
  • Tiers Muisca (1U, 5-50 users) → Mexica (4U-12U, 50-1K users) → Inka (multi-rack, 1K+ users)
  • Powered by OSSFIA (privai-baseline/ is a cherry-pick fork). Live: https://pirca.xclos.com

Key Benefits

Data Sovereignty

Pirca: your data never leaves

Built-in Compliance

9 cross-mapped frameworks

Verifiable Evidence

Evidence Engine v3 + Ledger WORM

LATAM-First

DLP with CC/CURP/RFC/CPF/CNPJ/RUT/DNI/CUIL

Request a demo