Clevi has created Saas (Software as a Service) business models through large-scale language models.

From now on, we will introduce each of the models created through Clevi's large-scale language model.

First, Saas (Software as a Service) refers to a cloud-based business model that provides software as a service over the Internet without installation.

Representative Clevi Saas models include (Coding Agent, natural language-based workflow ARI, security agent (Red Team Test)).

Clevi Coding Agent

Next-generation AI Coding Agent
- Clevi Coding Agent is based on the latest LLM (cip-5-agent) and provides code understanding, generation, and analysis performance equivalent to Claude 4.5 Sonnet and OpenAI Codex
- Ensures high accuracy and consistency even in complex business logic, large-scale projects, and multi-module environments
Agentic AI Structure
- Not a single AI, but a structure in which specialized agents for each role such as orchestration, architect, coding, QA, review, and debugging collaborate
- Each agent performs tasks in a division of labor and automates and optimizes the entire development process
- The AI takes the lead in the entire process from requirements analysis, design, implementation, testing, code review, to debugging
Extensive Programming Support and Practical Applicability
- Supports all currently developed languages and frameworks such as Python, Java, C/C++, Javascript, TypeScript, Go, Rust
- Automates the entire development process such as code generation, automatic refactoring, test code writing, bug detection and correction, documentation, and code review
- Optimized for enterprise environments such as large-scale codebase analysis, legacy code migration, and automatic API documentation generation
On-premises & SaaS Support
- SaaS (Cloud API): Quick adoption, no maintenance burden, easy real-time collaboration and scalability
- On-premises (in-house deployment): Optimized for special purposes such as security, data sovereignty, and regulatory compliance. Can be flexibly selected according to the company's security policy, data location, and network environment
Compatibility with Various IDEs and Development Environments
- Supports major IDE plugins and extensions such as Visual Studio Code, JetBrains series (IDEA, PyCharm, etc.), Eclipse, Jupyter Notebook
- Can be easily integrated into CI/CD pipelines, in-house development portals, and custom tools in API/SDK form

ARI (Natural Language-based Workflow Automation Agent Creation and Management Platform)

ARI is an intelligent agent creation platform that automatically designs, executes, and manages workflows with only natural language commands. By integrating Clevi's reasoning model group (cip-5-agent, cip-5-vision, ivy-4-mm, etc.), MCP (Model Context Protocol), external API integration, and plugin system, it automatically configures agent workflows that can be executed immediately upon command input.

Key Features

Natural language-based design: Nodes are automatically created and connected with a single line such as “Create a workflow for automatic report writing”
MCP, external API, plugin integration: Securely exposes and calls tools, data, and resources with standardized MCP, and easily expands with internal/external APIs and third-party plugins
Recursive Optimization: Evaluates execution results and automatically modifies/refactors node structure or generated code/parameters to continuously improve accuracy and efficiency
Multimodal support: Supports text, image, and document input/output, and provides results as a visual node map for easy tracking and auditing
Governance/Security: Supports authority, logging, and version history to ensure auditability and reproducibility in enterprise environments

Technical Differentiation and Value

Compared to existing tools centered on manual node wiring, the agent itself performs the closed loop of “understanding purpose → planning → execution → result verification → automatic correction” (combination of CTA, ToolCalling, Semantic DB)
Standardizes tool/resource linkage with MCP for high portability and scalability, and provides the same development experience in both on-premises and SaaS
Expands the scope of enterprise automation through integrated control with coding agents, Physical AI, and on-prem solutions

Expected Effects

Even non-developers can design and operate complex automation with natural language, and achieve both operational cost reduction and quality indicator (accuracy/processing time) improvement through result-based recursive optimization
Can quickly expand to new tasks/systems using the standard (MCP) and plugin ecosystem

Clevi Security Agent (Red Team Test)

Clevi Purple Agent automatically updates the US CVE database daily to secure the latest vulnerability information, and based on this, detects, verifies, and reports security vulnerabilities in internal networks, servers, networks, and applications in a white-hat hacker manner (simulation, mock attack) with only natural language-based target specification (e.g.: windows, web server, specific folder/file name). It supports the entire cycle of automated detection → scenario verification → report generation, and is designed to operate even in on-premises and isolated network environments, making it suitable for regulation-sensitive industries such as public, finance, and manufacturing.

Key Features

Daily CVE Feed Auto-Sync
- Keeps the latest vulnerability list by syncing with US NVD/CVE sources and internal threat intelligence (collection pipeline) daily.
Natural Language Target Specification (Simplified Operator Interface)
- Users can specify detection targets with natural language/simple keywords such as “windows”, “specific server:10.10.0.5”, “/var/www/html” (e.g., provided as a UI input method in the left panel)
Simulated White-hat Verification Engine (Non-destructive)
- Simulates the possibility of vulnerabilities in a safe sandbox/emulation environment (attempts exploit → reproduces vulnerability without observing impact) to determine the presence and risk of vulnerabilities without actual service interruption.
Automatic Report & Prioritization
- Sends summary notifications to administrators immediately upon detection (email/Slack/ticket), and automatically generates PDF/HTML reports including vulnerability impact and priority (summary of vulnerable location, reproduction conditions, recommended actions)
Scenario/Playbook Integration (Auto-Remediation Option)
- In approved environments, can trigger automatic execution of patch scenarios and temporary mitigation (defense rule application before patch). (Approval process required according to operational policy)
Integrated Log & SIEM Linkage
- Integrates system logs, detection logs, and report results into SIEM/security portal for continuous monitoring and auditing
Authority, Audit, Governance
- All detection and verification actions are recorded with account, approval, and timestamp for legal and regulatory audits.

Technical Differentiation and Value

Real-time/Daily Freshness
- Can track impact immediately after zero-day disclosure with daily automatic update pipeline for CVE/NVD.
AI-based Vulnerability Mapping
- AI matches the target specified in natural language with CVE technical descriptions (English/Korean) to prioritize the exposure possibility (vulnerability suitability) of the system.
Non-destructive Simulation Architecture
- Ensures safety by verifying in an “emulation sandbox” that does not cause customer service interruption.
Enterprise Deployment Options
- Supports SaaS, on-premises, and isolated network (SVCE), enabling compliance with public and financial regulations.
Automated Report & Traceability
- Reduces operational risk with complete audit trace (version, history, responsible person) of detection → verification → report.
Integrated Orchestration
- Automates the PoC → patch → verification loop by linking with ARI (workflow platform) and internal patch management/ticket systems.

Expected Effects (Business Impact)

Pre-risk Reduction
- Blocks actual breach risk in advance by quickly checking exposure to newly disclosed CVEs.
Improved Operational Efficiency
- Saves time and manpower for security teams by automating repetitive vulnerability checks and report tasks.
Enhanced Regulatory/Compliance Response
- Provides auditable inspection logs and reports tailored to regulatory requirements such as PIPA/CSAP.
Supports Rapid Decision Making
- Enables quick decision-making on patch/mitigation priorities with impact-based priority reports.

Clevi Saas (Coding Agent, ARI, Red Team Test)