Customers of AlphaAgent across financial services rely on it for their most business-critical work, and their most valuable intellectual property: the strategies, research and data that make a firm what it is.
AlphaAgent has always been class-leading on deployment, running completely inside your own AWS account. Today it goes further.
AlphaAgent can now be deployed with zero access from the public internet, attached directly to your AWS Transit Gateway.
What this means for customers:
You decide who gets in and what gets out. Only the ranges you list can reach AlphaAgent, signed in through your Entra ID and MFA. Everyone else can’t even resolve the address. Everything going out passes through your firewall, your allow-list, your inspection and your logs.
Your intellectual property stays on AWS’s private network. Models run on Amazon Bedrock, and the AWS services AlphaAgent runs on, including S3, DynamoDB, ECR and Secrets Manager, are all reached through VPC endpoints as standard. Your prompts, research and results never cross the public internet.
Agents see what you’ve approved, and nothing more. Built-in controls limit every agent to the ranges and ports your administrators sign off. Point one at your position database or risk engine and that’s all it can reach, read-only for SQL. The rest of your network stays out of reach.
No new perimeter to defend. It runs on your network, DNS, identity and firewall policy, so security review is a conversation about controls you already own.
And you don’t rebuild your network to get it.
AlphaAgent Organisations and Studio deploy themselves into fresh AWS accounts you own, through a guided installer and wizard. AlphaAgent deploys all the infrastructure seamlessly, from VPCs and load balancers to endpoints, and Organisations Fleet keeps it up to date with scheduled updates and automatic rollback if anything fails. Your network team brings an AWS Transit Gateway, a VPC range and a certificate, accepts one attachment and adds one DNS record. A full Studio install takes under an hour.
For firms whose edge is their intellectual property, this is the difference between agents you can pilot and agents you can run in production. There is nothing else like it.
Architecture diagrams and the network checklist: https://docs.alphaagent.prometheusrl.com/installation/private-network-access
