Clevi SaaS (Coding Agent, ARI, gwajin Red Team)

Clevi ta ƙirƙiri samfuran kasuwanci na Saas (Software as a Service) ta hanyar manyan samfuran harshe.

Daga yanzu, za mu gabatar da samfuran da aka ƙirƙira ta manyan samfuran harshe na Clevi ɗaya bayan ɗaya.

Da farko, Saas (Software as a Service) yana nufin tsarin kasuwanci na tushen gajimare wanda ke ba da software a matsayin sabis ta intanet, ba tare da shigar da software ba.

Manyan samfuran Saas na Clevi sun haɗa da (Coding Agent, ARI na tsarin aiki bisa harshen halitta, da wakilin tsaro (gwajin Red Team)).

Clevi Coding Agent (wakilin coding na Clevi)

Wakilin coding na AI na zamani

• Clevi Coding Agent, wanda ya dogara da sabon LLM (cip-5-agent), yana ba da matakin fahimtar lamba, ƙirƙirawa da nazari da ya yi daidai da Claude 4.5 Sonnet da OpenAI Codex
• Yana tabbatar da daidaito da kwanciyar hankali a cikin dabarun kasuwanci masu rikitarwa, manyan ayyuka da mahallin mai kayayyaki da yawa

Tsarin AI na Agentic

• Ba AI guda ɗaya ba ne, sai dai tsari ne inda ƙwararrun wakilai na kowane matsayi, kamar orchestration, architect, coding, QA, dubawa da gyara kurakurai, ke haɗin gwiwa
• Kowane wakili yana gudanar da aiki bisa rarrabawa, kuma yana sarrafa da inganta dukkan tsarin haɓakawa ta atomatik
• AI ce ke jagorantar dukkan matakai daga nazarin buƙatu, ƙira, aiwatarwa, gwaji, duba lamba har zuwa gyara kurakurai

Tallafin shirye-shirye mai faɗi da amfani a aikace

• Yana tallafawa dukkan yarukan shirye-shirye da tsarin aiki da aka haɓaka a halin yanzu, kamar Python, Java, C/C++, Javascript, TypeScript, Go da Rust
• Yana sarrafa dukkan tsarin haɓakawa ta atomatik, ciki har da ƙirƙirar lamba, sake tsara lamba ta atomatik, rubuta lambar gwaji, gano da gyara kurakurai, rubuta takardu da duba lamba
• An inganta shi don mahallin kamfanoni, ciki har da nazarin manyan rumbunan lamba, ƙaura daga tsohuwar lamba da ƙirƙirar takardun API ta atomatik

Tallafin kan-gida & SaaS

• SaaS (API na gajimare): saurin fara amfani, babu nauyin kulawa, da sauƙin haɗin gwiwa da faɗaɗawa a ainihin lokaci
• Kan-gida (gina shi a cikin kamfani): an inganta shi don dalilai na musamman kamar tsaro, ikon mallakar bayanai da bin ƙa'idoji. Ana iya zaɓarsa cikin sassauƙa bisa manufofin tsaro na kamfani, wurin bayanai da yanayin hanyar sadarwa

Dacewa da IDE da mahallin haɓaka daban-daban

• Tallafin manyan IDE ta hanyar plugins da extensions, kamar Visual Studio Code, jerin JetBrains (IDEA, PuCharm da sauransu), Eclipse, Jupyter Notebook da sauransu
• Ana iya haɗa shi cikin sauƙi ta hanyar API/SDK da bututun CI/CD, tashoshin haɓaka na cikin kamfani da kayan aikin musamman

ARI (dandamalin ƙirƙira da sarrafa agents na sarrafa workflows bisa harshen halitta)

ARI dandamali ne na ƙirƙirar agents masu hankali da ke tsara, aiwatarwa da sarrafa workflows ta atomatik ta amfani da umarnin harshen halitta kawai. Yana haɗa rukunin samfuran reasoning na Clevi (cip-5-agent, cip-5-vision, ivy-4-mm da sauransu), MCP (Model Context Protocol), haɗin API na waje da tsarin plugins don tsara workflows na agents da za a iya aiwatarwa nan take bayan shigar da umarni.

Yanayin aiwatar da dandamalin sarrafa workflows na ARI wanda aka gina bisa samfurin cip-5-agent

Manyan fasaloli

• Tsarawa bisa harshen halitta: Ta hanyar layi ɗaya kamar “ƙirƙira min workflow na rubuta rahoto ta atomatik”, ana ƙirƙira nodes kuma a haɗa su ta atomatik
• Haɗin MCP·API na waje·plugins: MCP mai daidaitacce yana ba da damar fallasa da kiran kayan aiki·bayanai·albarkatu cikin aminci, tare da sauƙaƙa faɗaɗa API na cikin kamfani/na waje da plugins na ɓangare na uku
• Ingantawa mai maimaituwa (Recursive Optimization): Yana kimanta sakamakon aiwatarwa, sannan ya gyara ko ya sake tsara tsarin nodes ko lambar da aka ƙirƙira/ma'aunai ta atomatik, yana ci gaba da inganta daidaito·inganci
• Tallafin multimodal: Yana tallafa wa shigarwa/fitarwa na rubutu·hoto·takardu, kuma yana gabatar da sakamako a matsayin taswirar nodes na gani domin sauƙaƙa bin diddigi da dubawa
• Mulki/tsaro: Yana tallafa wa izini·rajista·tarihin sigogi don tabbatar da damar dubawa da sake samarwa a mahallin kamfani

Bambancin fasaha da ƙima

• Idan aka kwatanta da kayan aikin da suka dogara kan haɗa nodes da hannu, agent yana aiwatar da madauki rufaffe na “fahimtar manufa → tsara shiri → aiwatarwa → tabbatar da sakamako → gyara ta atomatik” da kansa (haɗin CTA·ToolCalling·Semantic DB)
• Ta hanyar daidaita haɗin kayan aiki/albarkatu da MCP, yana da sauƙin ɗauka da faɗaɗawa, tare da samar da ƙwarewar haɓaka iri ɗaya a yanayin on-premises da SaaS
• Yana faɗaɗa iyakar sarrafa kansa a duk kamfani ta hanyar haɗa da sarrafa coding agents·Physical AI·On-prem solutions

Fa'idodin da ake tsammani

• Ko da waɗanda ba masu haɓaka ba za su iya tsara da sarrafa hadaddun ayyukan sarrafa kansu ta amfani da harshen halitta, tare da cimma rage kuɗin gudanarwa da kuma inganta ma’aunin inganci (daidaito/lokacin sarrafawa) a lokaci guda ta hanyar ingantawar maimaitawa bisa sakamako
• Ana iya faɗaɗa amfani da shi cikin sauri zuwa sabbin ayyuka/tsaruka ta amfani da daidaito (MCP) da tsarin muhalli na plugins

Wakilin tsaro na Clevi (gwajin red team)

Clevi Purple Agent wakili ne mai fasahar tsaro wanda ke sabunta ma’ajiyar bayanan CVE ta Amurka ta atomatik kullum domin samun sabbin bayanan raunin tsaro, sannan bisa waɗannan bayanai yana ganowa, tabbatarwa da bayar da rahoton raunin tsaro a cikin cibiyoyin sadarwa na ciki, sabar, cibiyoyin sadarwa, da aikace-aikace ta hanyar gwajin kutse da kwaikwayo irin na fararen hackers, ta hanyar ƙayyade abin da za a nufa da harshen halitta kawai (misali: windows, web server, takamaiman babban fayil/sunan fayil). Yana tallafawa cikakken zagayowar ganowa ta atomatik → tabbatar da yanayi → ƙirƙirar rahoto, kuma an tsara shi don aiki a mahallin on-premises da keɓaɓɓun cibiyoyin sadarwa, don haka ya dace da masana’antun da ke da tsauraran buƙatun ƙa’ida kamar gwamnati, kuɗi, da masana’antu.

<clevi security agent GUI screen>

Muhimman ayyuka

Aiki tare ta atomatik na ciyarwar CVE ta yau da kullum

• Yana aiki tare kowace rana da majiyoyin NVD/CVE na Amurka da bayanan barazanar cikin gida (bututun tattarawa) domin kiyaye jerin sabbin raunin tsaro.

Ƙayyade abin da za a nufa da harshen halitta (sauƙaƙaɗɗen hanyar mu'amala ta mai aiki)

• Mai amfani zai iya ƙayyade abin da za a duba ta amfani da harshen halitta/ƙananan kalmomi kamar “windows”, “takamaiman sabar:10.10.0.5”, “/var/www/html” da sauransu (misali, ana samar da hanyar shigarwa ta ɓangaren hagu a matsayin UI)

Injin tabbatarwa na fararen hackers da aka kwaikwaya (wanda ba ya lalata komai)

• Yana tabbatar da yiwuwar kasancewar rauni a cikin amintaccen yanayin sandbox/emulation ta hanyar kwaikwayo (ƙoƙarin Exploit → sake samar da rauni ba tare da lura da tasiri ba), sannan yana tantance kasancewar ko rashin rauni da matakin haɗarinsa ba tare da katse ainihin sabis ba.

Rahoto ta atomatik da tsara fifiko

• Nan da nan bayan ganowa, yana aika taƙaitaccen sanarwa ga mai gudanarwa (imel/Slack/tikit), kuma yana ƙirƙirar rahoton PDF/HTML ta atomatik wanda ya ƙunshi tasirin raunin tsaro da fifikonsa (wurin rauni, taƙaitaccen sharuɗɗan sake samarwa, da matakan da aka ba da shawara)

Haɗa yanayi da playbook (zaɓin haɗa matakan gyara ta atomatik)

• A cikin mahallin da aka amince da shi, ana iya kunna aiwatar da yanayin patch da rage barazana na wucin gadi (aiwatar da ƙa’idodin kariya kafin patch) ta atomatik. (Dole ne a bi tsarin amincewa bisa manufofin gudanarwa)

Haɗa cikakkun log da SIEM

• Ana haɗa log na tsarin, log na ganowa, da sakamakon rahoto cikin SIEM/shafin tsaro domin samun damar sa ido da duba bayanai a kowane lokaci

Izini, binciken tarihi, da tsarin mulki

• Duk ayyukan ganowa da tabbatarwa ana rubuta su tare da asusu, izini da tambarin lokaci domin shirye-shiryen binciken doka da na ƙa’ida.

Bambancin fasaha da ƙima

Sabuntawa cikin lokaci na gaske da kullum

• Bututun sabuntawa na atomatik na CVE/NVD na kullum yana ba da damar bin diddigin tasiri nan da nan bayan bayyana ‘zero-day’.

Taswirar raunin tsaro bisa AI

• AI tana daidaita abin da aka ayyana da harshen halitta da bayanin fasaha na CVE (da Turanci da Koriya), sannan ta ba da fifiko ga yiwuwar fallasawar tsarin (dacewar raunin tsaro).

Gine-ginen kwaikwayo marar lalata

• Ana tabbatarwa a cikin ‘emulation sandbox’ wanda baya haifar da katsewar sabis na abokin ciniki, don tabbatar da tsaro.

Zaɓuɓɓukan tura wa na kamfanoni

• Yana tallafawa SaaS, kan-sarva da cibiyar sadarwa keɓaɓɓiya (SVCE), don biyan ƙa’idojin jama’a da na kuɗi.

Rahotanni da bin diddigi na atomatik

• Cikakken bin diddigin bincike daga ganowa→tabbatarwa→rahoto (sigar, tarihi da mai alhaki) yana rage haɗarin aiki.

Tsarin daidaita ayyuka

• Haɗa ARI (dandamalin tafiyar da ayyuka) da tsarin sarrafa facin cikin gida da tsarin tikiti don sarrafa madauwari ta PoC→faci→tabbatarwa ta atomatik.

Fa’idodin da ake sa ran samu (tasirin kasuwanci)

Rage haɗari tun da wuri

• Binciken fallasawa cikin sauri ga sabbin CVE da aka bayyana yana hana ainihin haɗarin kutse tun da wuri.

Inganta ingancin aiki

• Aiki da kai na maimaita binciken raunin tsaro da ayyukan rahoto yana rage lokaci da ma’aikatan ƙungiyar tsaro.

Ƙarfafa martani ga ƙa’idoji da bin ƙa’ida

• Ana samar da rajistan bincike da rahotanni da za a iya tantancewa, bisa buƙatun ƙa’idoji kamar PIPA/CSAP.

Tallafawa yanke shawara cikin sauri

• Rahoton fifiko bisa matakin tasiri yana ba da damar yanke shawarar fifikon faci da rage haɗari cikin sauri.

Tambayoyi da buƙatar demo: [email protected]

Copyright© 2025 Clevi Inc. All rights reserved.