Clevi SaaS (Coding Agent, ARI, okugezesa kwa red team)

Clevi yatondawo ebika by’obusuubuzi bwa SaaS (Software as a Service) ng’ekozesa emiddo gya lulimi eminene ennyo.

Okuva kati, tujja kumanyisa emiddo emyatondebwa nga tukozesa emiddo gya lulimi eminene ennyo egya Clevi, gumu ku gumu.

SaaS (Software as a Service) kitegeeza ekika ky’obusuubuzi ekisinziira ku ggulu, ng’ekisooda kiwa empeereza ng’obuweereza okuyita ku yintaneeti awatali kuteeka pulogulaamu ku kompyuta.

Ebika bya Clevi SaaS ebikulu mulimu (Coding Agent, ARI ow’enkola y’emirimu eyesigamiziddwa ku lulimi olw’obutonde, n’omuweereza w’obukuumi (okugezesa kwa red team)).

Clevi Coding Agent (Clevi Coding Agent)

Omuweereza wa AI ow’okuwandiika koodi ow’omulembe oguddako

• Clevi Coding Agent, ng’esinziira ku LLM ey’omulembe (cip-5-agent), ewa obusobozi obw’okutegeera, okukola n’okwekenneenya koodi obwenkana obwa Claude 4.5 Sonnet ne OpenAI Codex
• Ekakasa obutuufu n’obutakyukakyuka obw’amaanyi ne mu nteekateeka z’obusuubuzi enzibu, pulojekiti ennene, n’ebifo ebirimu modules nnyingi

Enzimba ya AI esobola okukola ng’omuweereza (Agentic AI)

• Si AI emu yokka, wabula enzimba omuli abawereza abakugu abakolera awamu nga balina emirimu egy’enjawulo, gamba ng’okukwasaganya, okuzimba enkola, okuwandiika koodi, QA, okwekenneenya, n’okutereeza ensobi
• Buli muweereza akola omulimu gwe mu ngeri ey’okugabana emirimu, era enkola yonna ey’okukulaakulanya ekola n’okulongoosebwa mu ngeri ey’otoma
• AI ekulembera enkola yonna okuva ku kwekenneenya ebyetaagisa, okukola dizayini, okussa mu nkola, okugezesa, okwekenneenya koodi, okutuuka ku kutereeza ensobi

Obuwagizi obugazi obw’okupulomoota n’okukozesebwa mu nkola entuufu

• Ewagira ennimi n’enkola zonna ezikozesebwa mu kukulaakulanya kati, omuli Python, Java, C/C++, Javascript, TypeScript, Go, Rust n’endala
• Ekola mu ngeri ey’otoma enkola yonna ey’okukulaakulanya, omuli okukola koodi, okuddamu okugitegeka mu ngeri ey’otoma, okuwandiika koodi y’okugezesa, okuzuula n’okutereeza ensobi, okuwandiika ebiwandiiko, n’okwekenneenya koodi
• Etungiddwa bulungi okukozesebwa mu mbeera z’ebitongole, omuli okwekenneenya codebase ennene, okukyusa koodi enkadde, n’okukola ebiwandiiko bya API mu ngeri ey’otoma

Obuwagizi bwa on-premises ne SaaS

• SaaS (cloud API): etandika mangu, tewetaaga kutwala buzito bwa kulabirira, era kyangu okukolagana mu kiseera ekituufu n’okugaziya obusobozi
• On-premises (eteekebwa munda mu kkampuni): etungiddwa okusinziira ku byetaago eby’enjawulo nga obukuumi, obwannannyini bw’eb data, n’okugoberera amateeka. Kkampuni esobola okulonda mu ngeri ekyukakyuka okusinziira ku nkola yaayo ey’obukuumi, ekifo data we ziri, n’embeera ya network

Obukwatagana n’ama IDE n’ebifo eby’enjawulo eby’okukolamu enkola

• Okuwagira plugins n’ebigaziyizibwa ebikulu ebya IDE nga Visual Studio Code, JetBrains series (IDEA, PuCharm n’ebirala), Eclipse, ne Jupyter Notebook
• Kyangu okugatta mu CI/CD pipelines, emiryango gy’okukoleramu egy’omunda, n’ebikozesebwa eby’enjawulo nga API/SDK

ARI (Omukutu ogw’okukolamu n’okuddukanya agents ezikola enkola mu ngeri ey’obwengula nga zeesigama ku lulimi olwa bulijjo)

ARI ye platform ey’obwengula ey’okukolamu agents ezikola enkola, nga zisobola okukola dizayini, okuddukanya n’okufuga workflows nga okozesa ebiragiro byokka eby’olulimi olwa bulijjo. Egatta reasoning model family za CLEVI (cip-5-agent, cip-5-vision, ivy-4-mm n’ebirala), MCP (Model Context Protocol), okugatta external APIs, ne plugin system, ne eteekateeka workflows za agents ezisobola okukozesebwa amangu ddala ng’ekiragiro kiyingiziddwa.

Ekifo ekiraga ARI, platform y’okukola workflows ez’obwengula ezazimbibwa ku cip-5-agent model

Ebikola ebikulu

• Dizayini eyesigama ku lulimi olwa bulijjo: n’olunyiriri lumu lwokka olugamba “Nkubakire workflow ey’okukola lipoota mu ngeri ey’obwengula,” nodes zikolebwa ne ziyungibwa mu ngeri ey’obwengula
• Okugatta MCP, external APIs ne plugins: MCP ey’omutindo eyanjula n’ekozesa tools, data ne resources mu ngeri ennungi, era esobozesa okwanguyirwa okugatta APIs z’omunda n’ez’ebweru ne plugins ez’abakola abalala
• Recursive Optimization: Ekebera ebiva mu kukola, n’ereeta enkyukakyuka oba refactoring mu ngeri ey’obwengula ku nsengeka ya nodes oba code/parameters ezikolebwa, n’eyongera okutereeza obutuufu n’obukola obulungi
• Obuwagizi bwa multimodal: Ewagira okuyingiza n’okufulumya text, bifaananyi ne documents, era nkuwa ebivaamu nga node map erabika, ekifuula okulondoola n’okukola audit okwangu
• Governance/obukuumi: Ewagira olukusa, logging n’amateeka g’enkyukakyuka, ne ekakasa okusobola okukola audit n’okuddamu okukola ebintu mu mbeera za enterprise

Enjawulo n’omugaso eby’ekikugu

• Bw’ogeraageranya n’ebikozesebwa eby’edda ebyesigama ku kuyunga nodes mu ngalo, agent yeekolera yekka enkola enzigale ey’okutegeera ekigendererwa → okuteekateeka enteekateeka → okukola → okukakasa ebivaamu → okutereeza mu ngeri ey’obwengula (okugatta CTA·ToolCalling·Semantic DB)
• Okukwataganya tools ne resources nga tukozesa MCP ey’omutindo kwongera portability n’obugazi, era kuwa obumanyirivu obumu obw’okukolamu mu on-premises ne SaaS
• Okugatta n’okufuga Coding Agent, Physical AI ne On-prem solutions kwagaziyiza ensalo y’obwengula mu kkampuni yonna

Ebirungi ebisuubirwa

• Abatali ba bakulaakulanya nabo basobola okukola n’okuddukanya automation enzibu nga bakozesa olulimi lwa bulijjo, era ne batuukiriza okukendeeza ku nsaasaanya y’okuddukanya n’okulongoosa ebipimo by’omutindo (obutuufu/obudde bw’okukola) mu kiseera kye kimu nga bakozesa recursive optimization eyesigamiziddwa ku bivudde mu kukola
• Nga bakozesa omutindo (MCP) n’obutonde bwa plugin, kisoboka okugaziya amangu okutuuka ku mirimu oba sisitemu empya

Clevi security agent (okugezesa kwa red team)

Clevi Purple Agent ye intelligent security agent ekunganya mu ngeri ey’otoma buli lunaku database ya CVE ey’e Amerika okufuna amawulire ag’omulembe agakwata ku vulnerabilities, era ng’esinziira ku go, ezula, ekakasa, era eripoota security vulnerabilities mu internal networks, servers, networks, ne applications nga ekola mu ngeri ya white-hacker (penetration testing, simulation) ng’omukozesa alaga target mu lulimi lwa bulijjo lwokka (okugeza: windows, web server, folder/file name entongole). Ewagira enkola yonna ey’otoma okuva ku detection → scenario validation → report generation, era yakolebwa osobole okukola ne mu mbeera za on-premises ne isolated networks, ekigifuula esaanira amakolero agakwata ku mateeka ennyo nga gavumenti, eby’ensimbi, n’okukola ebintu.

<clevi security agent GUI screen>

Ebikulu ebikola

Okukwataganya otomatiki feed ya CVE buli lunaku

• Tukwataganya buli lunaku ensibuko za Amerika NVD/CVE n’eggwanga ly’amawulire g’obulabe ery’omunda (omukutu gw’okukung’aanya) okusigaza olukalala lwa vulnerabilities olusembayo.

Okulonda target mu lulimi lwa bulijjo (operator interface ennyangu)

• Abakozesa basobola okulonda ekigendererwa ky’okuzuula nga bakozesa ebigambo eby’olulimi lwa bulijjo oba ebigambo ebimpi nga “windows”, “server entongole:10.10.0.5”, “/var/www/html” (okugeza, enkola y’okuwandiika mu paneli ey’左 etegekebwa nga UI)

Enjini y’okukakasa eya simulated white-hacker (tekwata ku nkola)

• Ekakasa mu ngeri y’okugezesa mu mbeera ya sandbox/emulation etali ya bulabe obusoboka okubeerawo bwa vulnerability (okugezaako Exploit → okuddamu okukola vulnerability nga tewali kulaba ku ngeri gye ikosa), ne kisobozesa okusalawo oba vulnerability eriwo n’obuzibu bwayo awatali kuyimiriza mpeereza entuufu.

Lipoota ey’otoma n’okuteekateeka obukulu

• Amangu ddala nga ezudde, etumira omuddukanya obubaka obufunze (email/Slack/ticket), era ekola otomatiki lipoota ya PDF/HTML erimu obukulu n’engeri vulnerability gy’ekosa (ekifo w’eri, enfunze y’obukwakkulizo bw’okuddamu okugikola, n’ebikolwa ebisemba)

Okukwataganya scenarios ne playbooks (enkola ey’okukwataganya ebikolwa eby’otoma)

• Mu mbeera ezikkiriziddwa, kisoboka okutandika otomatiki enkola ya patch scenario oba temporary mitigation (okussa mu nkola amateeka g’okwekuuma nga patch tenassibwa). (Enkola y’okukkiriza ng’esinziira ku mateeka g’okuddukanya ya tteeka)

Okukwataganya logs ne SIEM

• System logs, detection logs, n’ebivudde mu lipoota bikwataganyizibwa mu SIEM/security portal okusobola okukola continuous monitoring n’okukola audit

Obuyinza, audit, ne governance

• Ebikolwa byonna eby’okuzuula n’okukakasa biwandiikibwa wamu n’akawunti, olukusa n’obudde byakolebwako, okusobola okwetegekera okwekebejja okw’amateeka n’ebiragiro.

Obw’enjawulo n’omuwendo mu by’ekikugu

Obupya obw’amangu na buli lunaku

• Pipa y’okulongoosa ey’awamu ekola obw’otomatiki buli lunaku ku CVE/NVD esobozesa okulondoola okukosebwa ‘amangu ddala ng’okubikkula obutali bukuumi obupya ku lunaku olwo kumaze okubaawo’.

Okukwataganya obunafu obwesigamiziddwa ku AI

• AI ekwataganya ebigendererwa ebiragiddwa mu lulimi olw’obutonde n’ennyonnyola ya CVE ey’ekikugu (mu Lungereza ne mu Lukooreya), n’ekulembeza emikisa gy’enkola eyo okubeera mu kabi (okutuukagana n’obunafu).

Enkola y’okugezesa etayonoona

• Obukuumi bukakasibwa nga okukakasa kukolebwa mu ‘sandbox y’okwegerageranya’ etaleeta kusalako kwa mpeereza za bakasitoma.

Enkola z’okuteeka mu nkola ez’ebitongole

• Ewagira SaaS, on-premises ne mutimbagano ogw’enjawulo (SVCE), ekisobozesa okugondera ebiragiro by’ekitongole kya gavumenti n’eby’ebyensimbi.

Lipoota ezikolebwa obw’otomatiki n’okulondoolwa

• Okukendeeza akabi mu nkozesa nga kuliko okulondoola okw’okwekebejja okujjuvu okuva ku kuzuula→kukakasa→lipoota (enkyusa, ebyafaayo n’omuntu avunaanyizibwa).

Okutegekera awamu

• Okukwataganya ne ARI (pulatifoomu y’emirimu egy’omutendera) awamu n’enkola z’omunda ez’okuddukanya obupatchi n’amatikiti, okufuula ekyetooloovu kya PoC→patch→kukakasa eky’obw’otomatiki.

Ebivaamu ebisuubirwa (akakwate ku bizinensi)

Okukendeeza akabi nga bukyali

• Okukebera mangu enkola bwe ziba nga ziri mu kabi olw’okubikkulibwa kwa CVE empya, kisobozesa okuziyiza akabi k’okumenyebwa kw’obukuumi nga tekunnaba kubaawo.

Okulongoosa obusobozi bw’emirimu

• Okukola obw’otomatiki emirimu egy’okukebera obunafu n’okukola lipoota egyiddiŋŋana, kikendeeza ku budde n’abakozi ab’ekibinja ky’obukuumi.

Okunyweza okuddamu ku biragiro n’okugondera amateeka

• Kuwa 로그 z’okukebera n’ebyawandiikibwa ebisobola okwekebejjebwa, nga bituukana n’ebyetaagisa mu biragiro nga PIPA/CSAP.

Okuwagira okusalawo okw’amangu

• Lipoota ezikulembeza ebintu okusinziira ku mutindo gw’okukosebwa zisobozesa okusalawo mangu ku kintu ekikulembera mu patch n’okukendeeza akabi.

Okubuuza n’okusaba okulaga demo: [email protected]

Copyright© 2025 Clevi Inc. All rights reserved.