Norra: An AI workforce for IT and security
Norra agents read tickets, alerts and telemetry, reason over MoxDB context, then act through ITMox, CyberMox and your existing tools to complete operational work.
How Norra works
Reads
Tickets, alerts, logs, metrics, traces & events.
Retrieves
Trusted context from MoxDB.
Reasons
With LLMs, ML, RAG, knowledge graph & policy.
Acts
Through ITMox, CyberMox or existing tools.
Audits
Verifies, escalates when unsure, logs everything.
An AI agent for every operational role — 21 and growing
IT Agents
Helpdesk Engineer
Resolves password resets, access requests, application and device issues, and routine service requests — end to end.
End-User Support Engineer
Proactively detects and fixes device performance and experience issues before users raise a ticket.
Service Management Analyst
Classifies tickets, runs root cause analysis, scores change risk and orchestrates service and change workflows.
Knowledge Manager
Turns every resolution into reusable knowledge and answers users via RAG-powered self-service.
Linux Administrator
Handles service restarts, disk and process management, package checks and log analysis on Linux systems.
Windows Administrator
Analyzes event logs, recovers services, validates patches and troubleshoots Windows endpoints and servers.
Database Administrator
Investigates database health, slow queries, capacity, backup status and availability across SQL and NoSQL.
Network Administrator
Correlates alerts, checks link and device health and triages connectivity issues across the network.
Cloud Administrator
Automates provisioning, scaling, drift remediation and cost-signal action across cloud environments.
Patch Management Engineer
Plans risk-based patching, executes staged rollouts and validates outcomes across OS, apps and firmware.
Backup & Recovery Administrator
Validates backups, tests recovery and orchestrates DR failover — ensuring every backup is recoverable.
IT Asset Manager
Discovers and reconciles assets, keeps the CMDB current and surfaces license and lifecycle risk.
Security Agents
SOC Analyst
Triages, enriches, correlates and investigates every alert, and recommends or executes approved response.
Threat Hunter
Proactively hunts for lateral movement, anomalous identities and emerging TTPs across your telemetry.
Incident Response Analyst
Coordinates containment, eradication, recovery and evidence gathering during security incidents.
Detection Engineer
Proposes, tests and tunes detections, and continuously reduces false positives.
Threat Intelligence Analyst
Enriches indicators, tracks actors and campaigns, and monitors brand and dark-web exposure.
Identity & Access Administrator
Triages access, runs reviews, detects identity threats and enforces least privilege.
Cloud Security Engineer
Triages CNAPP/CSPM findings, remediates misconfigurations and hardens cloud posture.
Compliance Analyst
Runs control checks, collects evidence and produces audit-ready reports across frameworks.
Forensic Analyst
Reconstructs timelines, analyzes artifacts and builds cases for security investigations.
How Norra connects — MCP & A2A
Build your AI operations workforce
Deploy Norra agents across IT and security roles — 24/7, governed, and inside your existing tools.
Build Your AI Workforce