Skip to main content
Myrmex is run by a team of specialized AI agents you talk to from the AI Workspace. Each agent is an expert in one area — endpoints, integrations, threat intelligence, posture, reporting — and they work together on your behalf. You describe what you need in plain language, and the right specialists take it from there.
“Agent” means two different things in Myrmex. On this page, an agent is an AI specialist you chat with. That is separate from the software agent — the program installed on a host (see Agent capabilities). The AI agents operate the software agent; they are not the same thing.

​
How You Direct the Team

There is no model or agent selector in the interface. You direct the team in two ways, and they do different jobs:
  • Name the specialist in your message — write “Perseus, list the running processes on…” and the request goes to that specialist. Say nothing, and Centurion, the orchestrator, reads your request and routes it to the right one (or several) automatically.
  • Attach context with @ — the @ picker is not an agent selector. It injects assets from your environment into the conversation: a device, an integration, a folder, the working plan, or a file. Each one appears as a chip so the agents act on exactly the right thing.

​
AI Proposes, You Approve

The agents investigate and analyze freely, but anything that changes your environment — isolating a host, applying a fix, running a command, scheduling an update — is proposed for your review first. You stay in control: the AI does the heavy lifting, and you approve what actually runs.

​
The Roster

Centurion

The orchestrator and your single point of contact. Interprets your request and routes it to the right specialists — including its SOC mode for alerts and investigations.

Brontes

The platform administrator. Manages Myrmex itself — records, roles and policies, integrations, folders, and agent installation tokens.

Perseus

The endpoint specialist. Investigates hosts and runs response actions — isolate, quarantine, kill a process, remediate.

Hydra

The integration specialist. Operates your connected tools across network devices, security software, databases, and cloud platforms.

Orion

The threat intelligence analyst. Investigates indicators of compromise, domains, IP reputation, and adversary infrastructure.

Athena

The security posture strategist. Scores your environment against frameworks like CIS, NIST, and ISO, and prioritizes what to fix first.

Apolo

The network topology specialist. Maps how your environment connects and surfaces devices on the network that nobody registered.

Iris

The researcher. Gathers open-source intelligence and external context from across the internet.

Scribe

The author. Turns analysis into professional reports, policies, and audit documents ready to share.

​
Working Together

The real power shows when a request needs more than one specialist. Say you ask Myrmex to investigate a suspicious alert on a server:
  1. Centurion interprets the request and builds a plan.
  2. Orion enriches the indicators — checking domains, IPs, and reputation.
  3. Perseus inspects the host itself, looking at the processes and connections behind the alert.
  4. Athena checks whether the host’s posture left an opening worth fixing.
  5. Scribe writes up the findings as a shareable report.
You watch it happen in the Workspace, and you approve any action that changes a system before it runs.
New to the platform? Start with Core concepts to see how the agents fit into contexts and the Workspace, then try the Quickstart.