ON2IT - Zero Trust Innovators

Select your region

Talk to us →
AUXO™ · Zero Trust Platform · ON2IT
The only platform
to operationalize
Zero Trust.
Every other SIEM, SOAR, and MDR platform treats Zero Trust as a reporting layer — bolted on after the event pipeline. AUXO™ is built differently at the architecture level. The Protect Surface is its native data schema. Zero Trust is not a feature in AUXO™. It is the structure everything is built on.
Request a demo → Read the architecture brief →
69 → 3
Events to analyst investigations
EventFlow AI processes events inside Zero Trust context, reducing noise before a human sees it.
100%
ZT-native data schema
Every event, screen, policy, and advisory organised around the Protect Surface — not mapped to it afterwards.
20+
Years operating Zero Trust
AUXO™ is the platform behind ON2IT's Managed GSOC — operational since 2005, refined in every environment.
The architectural difference · why it matters
Every other platform
Event-First Architecture — Zero Trust Bolted On
Standard SIEM, SOAR, and MDR platforms were designed around the event pipeline: ingest telemetry, match rules, generate alerts, route to analysts. Zero Trust posture is reported separately — a dashboard that maps alerts to ZT pillars after the fact. The event is the primary object. Everything else is context added later.
Event → Rule → Alert → Human
AUXO™
Protect Surface–First Architecture — Zero Trust Native
AUXO™ was designed around the Protect Surface. Every event arrives already enriched with Protect Surface identity, data classification, compliance scope, and ZT policy context. The Protect Surface is the primary object. Events are processed within that context — not labelled with it afterwards. That is what makes EventFlow AI work.
Protect Surface → Event + ZT Context → EventFlow AI → Human (if needed)
What AUXO™ does
01 — Define
Protect Surface Management
Define, map, and continuously maintain your Protect Surfaces — the critical data, applications, assets, and services that matter most. In cloud environments, AUXO™'s Azure API keeps metadata current in real time, automatically.
02 — Detect
ZT-Native Event Processing
Every security event is enriched with Protect Surface context before analysis. EventFlow AI processes this enriched data to reduce 69 raw events to 3 analyst-worthy investigations — not by filtering, but by understanding the ZT model.
03 — Enforce
Policy Enforcement
The Kipling Method is built into the platform. Every access policy answers Who, What, When, Where, Why, and How — enforced at the Protect Surface, verified continuously, and logged completely for audit and compliance.
04 — Report
Compliance Automation
One Zero Trust programme simultaneously satisfies ISO 27001, NIST 800-53, NIS2, DORA, PCI DSS, and more. Compliance reporting is a byproduct of AUXO™ — not a parallel workstream or separate audit exercise.
EventFlow AI · AUXO™
From 69 events to 3 investigations. Not by filtering. By understanding.
EventFlow is AUXO™'s agentic AI layer. Because every event arrives pre-enriched with Protect Surface identity and ZT policy context, EventFlow can evaluate whether an event is meaningful within the Zero Trust model — not just match signatures. The result is a dramatic reduction in analyst workload, without hiding threats.
Raw events ingested 69
↓ EventFlow AI · ZT context scoring
Prioritised for review 12
↓ Agentic triage · Protect Surface matching
Analyst investigations 3
Why organisations choose AUXO™
#1
US Federal Authority
The US President's National Security Telecommunications Advisory Committee cited John Kindervag, ON2IT BV as the primary Zero Trust authority. The methodology AUXO™ operationalizes became the US Government implementation standard.
20+
Years in production
ON2IT has operated 100% Zero Trust-based managed security since 2005. Every client. Every environment. AUXO™ has been refined across two decades of real deployments — not lab environments.
50–75%
Breach cost reduction
Organisations with a mature Zero Trust posture reduce data breach costs by 50–75% compared to those without a ZT strategy. Based on Ponemon Institute data and ON2IT's 100-point cost reduction framework.
See AUXO™ operating on a real Protect Surface.
30 minutes with an ON2IT architect. No slides, no generic demo — a live walkthrough on actual Zero Trust data.
Request a demo → Read the brief →

Frequently Asked Questions

What makes AUXO™'s architecture different from other SIEM, SOAR, or MDR platforms?

Standard platforms are event-first: they ingest telemetry, match rules, generate alerts, and map Zero Trust posture afterwards as a separate reporting layer. AUXO™ is Protect Surface-first: every event arrives already enriched with Protect Surface identity, data classification, compliance scope, and ZT policy context, which is what makes EventFlow AI possible.

How does EventFlow AI reduce 69 events to 3 analyst investigations?

Not by filtering signatures, but by evaluating each event within the Zero Trust model it's already enriched with. The funnel runs 69 raw events ingested, down to 12 prioritised for review through ZT context scoring, down to 3 analyst investigations through agentic triage and Protect Surface matching.

What are the four things AUXO™ does?

Define: continuously maintain Protect Surfaces, with real-time metadata capture in cloud environments via AUXO™'s Azure API. Detect: process every event enriched with Protect Surface context. Enforce: apply the Kipling Method (Who, What, When, Where, Why, How) at the Protect Surface. Report: one Zero Trust programme simultaneously satisfies ISO 27001, NIST 800-53, NIS2, DORA, PCI DSS, and more, as a byproduct rather than a parallel workstream.

What official recognition does AUXO™'s underlying methodology have?

The US President's National Security Telecommunications Advisory Committee cited John Kindervag, ON2IT BV as the primary Zero Trust authority. The methodology AUXO™ operationalizes became the US Government implementation standard.

How much can Zero Trust reduce breach costs, and how long has ON2IT run it in production?

Organisations with a mature Zero Trust posture reduce data breach costs by 50–75%, based on Ponemon Institute data and ON2IT's 100-point cost reduction framework. ON2IT has operated 100% Zero Trust-based managed security since 2005, more than 20 years of production use across every client and environment.