Turnkey Microservices & Signed Appliances — Zero Raw Scripts
Bottom line: Unlike DIY script toolkits, Parallax ships as a hardened 7-microservice control plane with turnkey cloud appliances, Kubernetes operators, and notarized desktop installers—unifying enterprise architecture and autonomous operations across every cloud, identity, SaaS, security, and ITSM plane.
Streaming Discovery & Synthesis
Continuously ingests multicloud, identity, and on-prem state via gRPC collectors into validated target-state blueprints.
Zero-Touch State Compiler
Compiles target-state blueprints into Bicep, Terraform, Kubernetes, and Graph-as-Code with blue/green canary gates.
14 Autonomous Specialists
Containerized specialist workers inspect posture and incidents 24/7, emitting cryptographically locked remediation plans.
In-Memory Graph & FinOps
Computes sub-second transitive blast-radius closures, prunes Tier-0 attack paths, and routes workloads for cloud arbitrage.
Deception & Prompt Shield
Orchestrates zero-noise identity/cloud canary honeytokens and sanitizes untrusted control-plane streams against injection.
WORM Seal & Reconstitution
Dual-verified immutable state archives, automated cross-cloud DR drills, and 4-stage Continuity of Government rebuild.
+ more: How Parallax Enterprise differs from open-source script toolkits
Parallax Atlas — Streaming Estate Discovery & Blueprint Synthesis
Bottom line: Parallax Atlas (`prlx-atlas-svc`) runs continuous agentless discovery across Azure, AWS, GCP, Entra, M365, Kubernetes, and on-prem hypervisors—synthesizing right-sized target-state manifests and calibrating architectural standards from every run.
Multi-Plane Normalizer
Streams cloud asset inventories, identity graphs, and endpoint telemetry into a unified, zero-PII canonical graph.
Target-State Synthesis
Scores live posture against 22 architectural pillars and compiles phased migration & deployment waves (`C14`).
Empirical Calibration
Automatically folds DR drill RPO/RTO timings, incident RCAs, and FinOps utilization back into future sizing models.
ghcr.io/goparallax/prlx-atlas-svc:2.4.0
SLSA-3 Provenance Verified · Zero Standing Credentials
Parallax Forge — Zero-Touch Multicloud & SaaS Provisioning Engine
Bottom line: Parallax Forge (`prlx-forge-svc`) transforms approved Atlas blueprints into transactional deployments across cloud infrastructure, Kubernetes clusters, identity policies, and edge WAF zones—with automatic pre-flight cost gates and one-click rollback.
Bicep, Terraform & Helm
Transactional state compiler for Azure Landing Zones, AWS/GCP foundational accounts, and Kubernetes operators.
Entra, Okta & Intune
Stamps out Conditional Access baselines, least-privilege RBAC roles, and Cleanbench hardened endpoint profiles.
Cloudflare & GitHub
Provisions Strict TLS, SPF/DMARC anti-spoofing, Zero Trust Access policies, and immutable repository rulesets.
ghcr.io/goparallax/prlx-forge-svc:2.4.0
Pre-Flight FinOps Gate + Blue/Green Rollback Attached
Parallax Swarm — Universal Control-Plane Adapter Mesh
Bottom line: Replace portal context-switching with Parallax Swarm (`prlx-swarm-svc`). Containerized specialist workers continuously audit 14+ enterprise platforms via read-only OIDC scopes, correlating cross-plane drift and proposing SHA-256-locked remediations.
+ more: Open-ended SDK for custom enterprise adapters (Okta, CrowdStrike, Wiz, Snowflake)
Parallax Graph & Ledger — Dependency Closure & FinOps Arbitrage
Bottom line: Parallax Graph (`prlx-graph-svc`) models every identity, network, compute, and SaaS dependency in memory to guarantee zero unintended blast radius, while the FinOps Placement Router continuously arbitrages compute and AI token spend across clouds.
Multi-Cloud Rate Router
Benchmarks spot/reserved SKU curves and free-tier grants across Azure, AWS, GCP, and AI model providers in real time.
Transitive Closure Check
Computes downstream impact across sessions, workloads, and Tier-0 roles before any change plan can enter the approval queue.
Executive Maturity Score
Ranks Reliability, Security, Cost, Operational Excellence, and Performance across business units (p25 / p50 / p75).
Parallax Ward — Canary Deception Mesh & Prompt-Injection Shield
Bottom line: Parallax Ward (`prlx-ward-svc`) seeds zero-standing-cost decoy credentials and honeytoken break-glass identities across your tenant, while inspecting every external API string through a deterministic prompt-injection firewall.
Identity & Cloud Tripwires
Plants tracked decoy service principals and break-glass honeytokens where any touch is high-confidence attacker activity.
Control-Plane Sanitizer
Inspects untrusted display names, tags, WAF logs, GitHub issues, and ITSM tickets before any LLM specialist ingests them.
Instant Queue Quarantine
Any tripwire alert automatically freezes Angle B write approvals, revokes active sessions, and seals a WORM forensic snapshot.
Parallax Bunker — Dual-Verified WORM Archive & 4-Stage Reconstitution
Bottom line: Survive ransomware or total control-plane loss. Parallax Bunker (`prlx-bunker-svc`) maintains dual-verified immutable archives across clouds and orchestrates automated 4-stage Continuity of Government (COG) estate reconstitution.
Immutable LKG
Split write-only uploader and independent cryptographic verifier lock pre-compromise snapshots.
DNS & Identity
Activates pre-seeded Lifeboat DNS and remaps directory object IDs in the clean recovery tenant.
Code & Workstations
Rehydrates signed git bundles, governance state, and isolated Cleanbench operator endpoints.
Cross-Cloud Restore
Reconstitutes production workloads and SaaS policies with audited RPO/RTO scorecards.