Hilt

What the company sells

Hilt sells a platform that maps data movement across cloud and endpoint infrastructure. Hilt is Data Movement Governance for modern infrastructure. Hilt ties each move to a real person and the job that ran it, then scores it against how the data normally moves. Hilt uses a temporal GNN with proprietary ML models to score every move, and agentic investigation writes the case. Hilt says the most valuable data leaves on credentials that are supposed to have it.

Hilt collectors are agents on customer hosts that produce metadata-level telemetry, shipped as a Linux static binary and a macOS managed agent. Hilt reads metadata only by default: who moved what, from where, to where, and how many bytes. Content-aware inspection in Hilt is a toggle the customer controls. Hilt supports both metadata-only and content inspection data collection. Hilt collectors read process, file, and network activity at the kernel across Linux hosts, VMs, containers, and bare metal. On macOS, Hilt uses a system collector and a managed browser extension to watch the last hop, resolved to the person and process behind it. Hilt device endpoints run kernel collectors on macOS and Windows, plus a managed browser extension across Edge, Safari, Firefox, and Chromium browsers. Hilt presents a move that begins on Linux and ends on macOS as one story, not three logs.

One example rule is to alert when payroll data is uploaded outside the approved payroll job. Hilt can send findings to Slack or email, or export them to any SIEM. Hilt response options are to alert, block the upload, or isolate the host. Hilt observation runs off the data path, and enforcement is opt-in and acts at the endpoint, never inline on a server's high-throughput path.

Hilt can isolate a host at the network from the control plane, quarantined while the rest of the fleet keeps running. Hilt intervention is optional and set per workload; on Linux the response is host quarantine, and on macOS Hilt can block the exfil itself. Whether Hilt alerts or quarantines the host, the customer gets a written case covering what happened, why it is unusual, the evidence, and what was done, in plain language. Hilt response is opt-in and off by default.

Hilt deploys as a single-tenant platform inside the customer's own cloud account. Each customer receives a dedicated deployment in its own AWS account, GCP project, Azure subscription, or Ali Cloud account. Hilt applies a Terraform configuration to create the platform infrastructure in the account the customer nominates. The Hilt dashboard is a web application for investigation, detection rules, and administration, reached over private networking. The Hilt analytics database is a column store that holds normalized telemetry and findings. Hilt does not receive, mirror, or hold out-of-band access to customer events. The single exception is the anonymized data export, a core pipeline that transfers only anonymized statistical features after the customer's review and approval. A Hilt collector has exactly one outbound destination: the ingest endpoint, over HTTPS on TCP/443.

Hilt collectors roll across a fleet, one per host, with no reboot, no inline tap, and nothing in front of the traffic. Hilt collectors run off the data path with no listening ports and one outbound rule, and cannot drop, delay, or alter a packet. Hilt operates the platform components in the customer's account, shipping releases, applying updates, and monitoring platform health. The Hilt auto-update agent runs as a Kubernetes CronJob in the customer's cluster. For airgapped environments, Hilt ships an offline bundle with the full artifact set.

Hilt engineers do not hold standing access to the customer's environment. In the Hilt dashboard, teams constrain which hosts a user can see. Hilt records security-relevant actions to the audit log, which administrators manage.^{[1][2][3][4][5][6]}

Categories

• Data loss prevention (primary category)
• Insider risk management
• Workforce AI usage security
• Third-party risk and security ratings
• Compare Hilt with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

hilt.ai

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Platform^[3][4][5]

  Maps data movement across cloud and endpoint infrastructure.

  Hilt ties each move to a real person and the job that ran it, then scores it against how the data normally moves. Hilt uses a temporal GNN with proprietary ML models to score every move, and agentic investigation writes the case. Hilt deploys as a single-tenant platform inside the customer's own cloud account.

• Infrastructure^[1][2][3][4]

  Collectors read activity at the kernel across Linux hosts, VMs, containers, and bare metal.

  Hilt collectors read process, file, and network activity at the kernel across Linux hosts, VMs, containers, and bare metal. Hilt collectors roll across a fleet, one per host, with no reboot and no inline tap.

• Endpoints^[4]

  Kernel collectors on macOS and Windows plus a managed browser extension.

  Hilt device endpoints run kernel collectors on macOS and Windows, plus a managed browser extension across Edge, Safari, Firefox, and Chromium browsers. On macOS, Hilt uses a system collector and a managed browser extension to watch the last hop, resolved to the person and process behind it.

• Auto-update agent^[5]

  Optional agent that rolls out collector updates in the customer's cluster.

  The Hilt auto-update agent runs as a Kubernetes CronJob in the customer's cluster. The Hilt auto-update agent polls the Hilt release registry, mirrors new images into the customer's registries, rolls out the update, verifies health after rollout, and reports status to a configured webhook.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Hilt's categories, then alphabetical. A list from the record, never a ranking.

• On data loss prevention, Hilt competes with Jazz, Next DLP, Cyberhaven, Fasoo, Forcepoint, Code42, Concentric AI, DTEX Systems, Harmonic Security, Keep Aware and 19 more.

• On insider risk management, Hilt competes with Code42, DTEX Systems, Teramind, Jazz, Next DLP, Cyberhaven, Archipelo, Gurucul, Mimecast and Proofpoint.

• On workforce ai usage security, Hilt competes with Harmonic Security, Aurascape, Pluto Security, WitnessAI, Jazz, Next DLP, Concentric AI, Fasoo, Keep Aware, Kovrr and 17 more.

• On third-party risk and security ratings, Hilt competes with Bitsight, Black Kite, iCOUNTER, Panorays, Prevalent, RiskRecon, SecurityScorecard, UpGuard, Whistic, Kovrr and 28 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]hilt.aiHilt · hilt.ai · undated page, accessed November 6, 2026 · Tier A: the company, a regulator or a filing
2. [2]Hilt | Data Movement Governance at the KernelHilt · undated page, accessed November 11, 2026 · Tier A: the company, a regulator or a filing
3. [3]Architecture & data flow - Hilt DocumentationHilt · published October 8, 2026 · Tier A: the company, a regulator or a filing
4. [4]The Hilt platform | Agentic Data Movement Governance at the kernelHilt · undated page, accessed November 11, 2026 · Tier A: the company, a regulator or a filing
5. [5]Security operations - Hilt DocumentationHilt · published October 8, 2026 · Tier A: the company, a regulator or a filing
6. [6]Access & identity - Hilt DocumentationHilt · published October 8, 2026 · Tier A: the company, a regulator or a filing

Last verified November 6, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 6, 2026, expanded November 11, 2026 from the references above.

Work for Hilt? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.