Browser AI governance
Govern prompts, uploads, and generated content across ChatGPT, Claude, Gemini, Copilot, and other browser tools. Apply allow, coach, redact, block, or review policies before sensitive data moves.
TUTELA BY H2HRequest an offerComplimentary 60-day evaluation
Control AI workflows before sensitive data or autonomous actions create risk.
Tutela Agentic Security gives security teams visibility and policy control across prompts, files, outputs, model traffic, MCP tools, usage signals, and autonomous actions—all within a customer-controlled deployment.
Complimentary Tutela software terms are available only through an H2H-issued private offer after review. AWS infrastructure consumed by your deployment is billed by AWS.
The public AWS Marketplace offer is a paid annual purchase at the USD 125,000 list price; clicking it does not begin a complimentary trial.
Runtime decisionPolicy active
01User or agentRequests data or action
02Tutela checksIdentity · data · tool · policy
AllowCoachRedactBlockReview
Every decision recordedReview the user, model, prompt, policy, tool, and resulting action.
The problem
AI adoption is moving faster than traditional security controls can follow.
Tutela governs the runtime interaction—not merely the model or application.
Employees paste confidential data, customer information, source code, credentials, and files into browser-based AI tools.
Internal copilots send business context to external models through APIs and gateways.
AI coding agents can inspect repositories, local files, terminals, infrastructure configuration, and secrets.
MCP-connected agents can invoke tools and take actions that exceed the user’s intended authority.
Security teams often lack one reviewable record connecting the user, model, prompt, data, tool, policy decision, and resulting action.
Evaluation use cases
Start with the runtime surface that matters most.
Developer AI and coding agents
Protect source code, credentials, local files, terminal activity, cloud configuration, and proprietary context when developers use Cursor, VS Code agents, Codex, Claude Code, and similar tools.
Embedded AI and enterprise gateways
Inspect AI traffic from internal copilots, customer-facing assistants, SaaS applications, SDKs, and centralized model gateways.
MCP and autonomous-agent governance
Register trusted MCP servers, inspect tool calls, apply authorization policy, and preserve evidence of requested and completed actions.
Inside the product
See how Tutela blocks risky AI activity and preserves the evidence.
Business value
Enable useful AI without accepting unmanaged risk.
Approve more AI use cases
Give security teams controls they can evaluate instead of relying on blanket bans.
Prevent sensitive-data leakage
Inspect prompts, files, API payloads, outputs, and tool calls before they cross a trust boundary.
Govern autonomous actions
Apply policy when agents request access to tools, systems, or business workflows.
Accelerate investigations
Preserve searchable context for users, models, policies, exceptions, and actions.
Create audit-ready evidence
Maintain reviewable governance records within the customer’s operating environment.
Complimentary evaluation through AWS Marketplace
A clear path from request to runtime evaluation.
AWS private offers are tied to designated AWS account IDs and are visible only to those accounts.
- 1
Submit
Tell us about your use case and provide the AWS account ID that should receive the offer.
- 2
Review
H2H verifies the request and creates a complimentary private offer for that account.
- 3
Accept
Review and accept the offer in AWS Marketplace while signed in to the designated AWS account.
- 4
Deploy
Follow the deployment and configuration guides to begin evaluating Tutela in your environment.
Configuration resources
Move from acceptance to a working evaluation.
Use the guides that match your deployment and runtime surfaces.
Guide
Platform overview
Understand the runtime controls, inspection surfaces, and customer-owned operating model.
Open resource →GuideDeployment guide
Prepare the AWS environment and deploy Tutela Agentic Security on Amazon ECS or EKS.
Open resource →GuideArchitecture diagrams
Review deployment boundaries, runtime traffic paths, and core service relationships.
Open resource →GuideMCP integration
Connect trusted MCP servers and govern agent tool calls and actions.
Open resource →GuideClient configuration
Configure Cursor, VS Code, OpenAI-compatible clients, and other supported AI surfaces.
Open resource →GuideAll Agentic Security resources
Browse the complete collection of product, deployment, and configuration guidance.
Open resource →Need help with your private offer, deployment, or configuration? Contact support@h2htech.com.
Questions and answers
What buyers need to know before requesting an offer.
What does Agentic Security inspect and govern?
Tutela inspects runtime interactions across prompts, files, uploads, API payloads, outputs, model traffic, usage signals, MCP tool calls, and requested autonomous actions. Policy can allow, coach, redact, block, or route an interaction for review while preserving evidence.
Which AI applications and runtime surfaces are supported?
The evaluation covers Browser AI, developer and coding agents, embedded AI and model APIs, enterprise gateways, and Agentic or MCP ecosystems. Examples include ChatGPT, Claude, Gemini, Copilot, Cursor, VS Code agents, Codex, Claude Code, internal copilots, SDKs, and centralized model gateways. Final scope is confirmed during evaluation planning.
Where is Tutela deployed?
Tutela Agentic Security is deployed into a customer-controlled AWS environment using Amazon ECS or Amazon EKS. Inspection, policy decisions, usage records, and audit evidence remain within the operating model your team controls.
Why is the complimentary evaluation delivered as a private offer?
AWS Marketplace does not provide a self-service complimentary trial mechanism for this container contract. A private offer lets H2H provide complimentary Tutela software terms to the designated buyer account while keeping acceptance and entitlement within AWS Marketplace.
What information is required to create the offer?
H2H needs a work contact, organization, primary use case, the 12-digit AWS account ID that should receive the offer, the account relationship, and a desired evaluation start date. Deployment preference and Marketplace acceptor contact are helpful but optional.
How do I find and accept my private offer?
Open the seller-provided procurement link while signed in to the designated AWS account, or open AWS Marketplace and choose Private offers. Review the terms and use your organization’s normal AWS Marketplace approval and acceptance process.
Why does the offer link show a 404 or no offer?
A private offer is visible only while signed in to its designated AWS account. A different signed-in account can produce a 404 or hide the offer. Switch to the designated buyer account and confirm that the user has the AWS Marketplace permissions required by your organization.
Are AWS infrastructure costs included?
No Tutela software charge applies to the complimentary evaluation offer. AWS infrastructure consumed by the customer-controlled deployment—such as compute, storage, networking, and logging—is billed by AWS to the customer account.
What happens after accepting the offer?
The AWS software entitlement begins at acceptance. H2H then helps confirm the deployment path and configuration resources. The H2H 60-day evaluation period begins when the Tutela deployment is operational, and auto-renewal is not enabled.
Where can I find configuration documentation and support?
Use the Agentic Security resource collection for deployment, architecture, MCP, certificate, and client-configuration guides. Need help with your private offer, deployment, or configuration? Contact support@h2htech.com.
Need help with your private offer, deployment, or configuration? Contact support@h2htech.com.