What is Garrison AI
Garrison AI manages your infrastructure with AI that runs on hardware you own. Your servers, cloud accounts and Kubernetes clusters sit in one console. You ask in plain language, Garrison answers with read-only checks and drafts the change, and a person approves it. On top of that it keeps your estate secure: SIEM alerts, threat hunts, attack surface and firewalls. Nothing changes in your estate until a person approves it.

Run your infrastructure
Section titled “Run your infrastructure”- Systems. Linux and Windows machines, each with a small Garrison agent. You get health, inventory and terminals, and roles that set up a log collector, a jump host or a scanner.
- Cloud and Kubernetes. AWS, Azure, Kubernetes and Hetzner in one inventory. Ask what is running, what it costs and what is exposed; changes are proposed for approval.
- Ask Garry. “Check disk, memory and failed services on #prod”, “why is nginx failing on web-01?”, “install the monitoring agent on the selected systems”. Read-only checks run at once; fixes wait for your approval.
- Monitoring. Logs, metrics and dashboards from every system, on the appliance’s own Grafana.
- Automation. Recurring checks and reports run on a schedule and tell you what they found.
Keep it secure
Section titled “Keep it secure”- SIEM alerts become cases. Alerts are grouped, enriched and drafted for an analyst, who sets the verdict.
- Hunts and attack surface. Threat hunts mapped to MITRE ATT&CK, and scans of the targets you authorize, turned into findings with compliance references.
- Firewalls and WAFs. Configuration history, drift from your baseline, and approved blocks.
One rule: a person approves every change
Section titled “One rule: a person approves every change”Installing a package, restarting a service, changing a security group or blocking an address: each one is proposed with the exact command or rule, waits for a person, then runs and is checked and audited. The appliance, not the AI model, decides what is read-only.
What it runs on
Section titled “What it runs on”Garrison AI is an appliance: one or more NVIDIA DGX Spark (or Asus GX10) boxes on your network. The AI models, your data and the audit trail stay on them. No prompt, log or alert is sent to an outside AI service unless you connect one yourself.
Underneath, Garrison runs on Open Agent Fabric (OAF), an open-source platform that serves the models, routes requests between them and collects metrics, logs and traces. OAF is open source under Apache-2.0. Garrison AI is the first use case built on it, and a commercial product. The same foundation carries use cases for other industries, such as finance, legal or healthcare, which Open Agent Fabric builds with customers as consulting engagements (talk to us).
| Open Agent Fabric | Garrison AI | |
|---|---|---|
| What | AI platform: models, gateway, routing, observability | Infrastructure management and security console |
| Licence | Open source (Apache-2.0) | Commercial |
| Who uses it | Platform engineers, app developers | IT operations, platform and security teams |
- How it works: the pieces and how they talk.
- Requirements: what you need before installing.
- Install on one box.