Your machines watched, your rules held, a proof you can show.
A small organisation does not need a security department. It needs the agent that measures, the rule that is written down, a person who answers, and a sealed statement for the bank, the auditor or the donor. Corners does the four, and asks you before touching anything.
How it works
What the agent sends: file integrity hashes and paths, policy results, installed software versions, allow-listed logs. What it never sends: file contents, keystrokes, screenshots, browsing.
Three ways to be covered
Prices are a working hypothesis to confirm with the first three organisations; billed monthly in EUR (KES and XOF on request), machines counted by the manager on the first of the month.
Watch
For the organisation that wants to see, and to show.
- Agent enrolled, machines and alerts on your security page
- The policy measured, not enforced
- Vulnerability feed
- Monthly sealed attestation
- An incident file opens on a serious alert; you act
- Your events, exported and sealed
Guard
For the organisation that wants someone to act, and to answer for it.
- Everything in Watch
- The policy enforced where the agent can: encryption, lock, patch nudges
- River drafts fixes for your integrations, read-only, under mandate
- Isolation, quarantine, process stop, under a mandate you accept
- The 72-hour breach clock and the authority draft
- A person in office hours (Rome); containment automated at night
Shield
For the organisation that hands security over, and keeps the decisions.
- Everything in Guard
- Your back-office sign-in through Corners: passkeys, posture, held appointments
- Your secrets rotated with probes and a ledger
- Data-protection office: register, rights requests, consents, agreements with your own processors
- A quarterly review with your bureau; the attestation signed by a named person
Said plainly
What you can show
Sample figures. Every attestation carries, in the document, what it is not.
Questions we get
Does Corners see what is on our machines?
No. The agent sends hashes and paths of watched files, policy verdicts, software versions and allow-listed log lines. Content, keystrokes, screens and browsing never leave the machine; the door that receives alerts refuses them by name.
Can Corners act on a machine without asking?
No. An action on a machine is a mandate your bureau accepts with a passkey, for 24 hours at most, for the machine named in the request. The first fourteen days, the gate only records what it would have refused.
Who is this for?
Organisations of 5 to 150 machines with a reason to show their posture: associations and NGOs with donors, clinics, fintech agents, hotels, law and accounting firms, schools, software teams whose clients ask.
What about our existing provider?
Keep them. Guard measures and proves; your provider can keep running the machines. The attestation names what was enrolled, nothing else.
Where is the data kept?
In the European Union, under a data processing agreement you sign with Corners. Your events are yours: exported on request, sealed, in a format your auditor can verify.
Ask for a Guard quote
A person answers within two working days. No account needed; nothing is installed until you decide.
Already hosted by Corners? Your security page is at corners.africa/org/security