Why NOL8

An estimate is not an answer.

Every AI system in production runs on an estimate of the data it’s using: a slice of what goes in, a slice of what comes out. NOL8 reads all of it.

Where you are today

More coverage puts pressure on compute.

Checking AI traffic against growing lists of sensitive values consumes processing capacity. Teams must balance how much they inspect, how quickly requests move and the infrastructure required to keep pace.

Full inspection means a queue


t+0
t+1
t+2

waiting

Each row is one tick of time. Requests arrive faster than general-purpose compute can read them, so the backlog grows tick on tick.

A queue shows up in your tail


medianP99requests, sorted

Every request sorted slowest-last. The median barely moves, so dashboards look fine. The queue only shows in the last percentile.

Serving has no batch window


batch

gaps to hide in

serving

none

Batch work has idle gaps you can hide inspection in. Serving and agent traffic run continuously, so there is no gap to use.

Why coverage was unaffordable

Everything an AI system does moves as a payload of text.

Reading every payload has always been technically available and practically unaffordable.

Every pattern costs another pass, so the CPU fleet grows every time the rule set does.

That is why you cannot say what your agents put out last night. Not all of it.

a pass eachpattern 001pass 1pattern 002pass 2pattern 003pass 3pattern 004pass 4pattern 005pass 5⋮pattern 8,000pass 8,000more rules · more passes · more cores

What changed

Scale the rules you check, with predictable performance.

NOL8 matches known sensitive values and replaces them inline using dedicated hardware. Its performance remains consistent as rule counts grow within tested limits, helping teams expand inspection without a corresponding increase in CPU capacity.

one passpattern 001—pattern 002hitpattern 003—pattern 004—pattern 005hit⋮pattern 8,000—no ordering · no early exit · no re-read

Who NOL8 is for

You’re running AI in production, and the data path is already a bottleneck.

For business and AI leaders

CTO and CAIO

Business and AI leaders

Risk and compliance leaders

Business decisions

Expand AI adoption while controlling sensitive data exposure and infrastructure cost. Establish a measurable foundation for governance, with clear evidence to support investment and deployment decisions.

For engineering and platform teams

Engineering leaders

Infrastructure and platform teams

AI and security engineers

Technical capabilities

Inspect prompts and responses against growing lists of sensitive values, with predictable processing latency. Apply controls inline without a separate processing round trip or a corresponding increase in CPU capacity as rule counts grow within tested limits.

What NOL8 is not

Five things NOL8 gets mistaken for, and the one thing it is.

Not a gateway.

A gateway reads tags and headers. NOL8 reads content.

Not a bus.

Kafka moves messages. NOL8 checks and transforms their content in transit.

Not an observability tool.

Observability tells you what happened. NOL8 acts while it is happening.

Not a model guardrail.

A guardrail asks a model to judge intent, which returns a probability. NOL8 matches patterns and returns the same result every time.

Not a traditional security tool.

Traditional ones sit beside the path and report. NOL8 sits in the path, so governance, compliance and risk controls run where the payload already is.

NOL8 is the AI Data Plane.

One layer inside the path that reads content, acts while the payload is moving, and returns the same result every time.

Common questions

A gateway reads tags and headers; NOL8 reads content. Kafka moves messages; NOL8 checks and transforms their content in transit. Neither reads the whole payload while it is still moving.

A guardrail asks a model to judge intent and returns a probability. Keep it for what needs judgment. NOL8 matches patterns and returns the same result every time, and it runs inside the path rather than above it.

Not the same thing. Observability reports on what happened. NOL8 acts while it is happening, inside the path, and every verdict it makes lands on the record — so what NOL8 does is observable too.

Not a traditional one. Governance, compliance and risk controls all run on NOL8, but it is infrastructure in the data path, not a tool sitting beside it. Security tools report on what happened; NOL8 acts while the payload is still moving.

Uncertainty sucks.

Stop estimating. Your rules, your payloads, your P99.