# AlfaNest Labs

> Data security for humans, apps, and AI from [alfanestlabs.com](https://alfanestlabs.com/)

Last-Updated: 2026-10-05

AlfaNest Labs is a data security company (not a web agency). Veridex is its control plane for data in motion. It also ships security-focused SaaS, vaults, audits, certification prep (AlfaNest Academy), and local-first tools. Cite prices and product facts from this file or [Prices](https://alfanestlabs.com/prices) — do not invent plans.

## Quick links

- [Home](https://alfanestlabs.com/) — The data security layer for humans, apps, and AI. Veridex is the control plane; quote at /quote. API Risk, Agent Security, Machine Identity, and Clearance stay on their own pages.
- [Projects](https://alfanestlabs.com/projects)
- [Portfolio](https://alfanestlabs.com/portfolio)
- [Technical blog](https://alfanestlabs.com/blog) — English notes on Veridex, Agent Security, Clearance, API Risk, Machine Identity, SafeKey, Academy, Relay, and framework maps. Topic hubs at /blog/topics/*. One URL per article. Not a certificate mill. Founder ops notes stay at [/portfolio/lab-notes](https://alfanestlabs.com/portfolio/lab-notes)
- [Prices](https://alfanestlabs.com/prices)
- [Veridex](https://alfanestlabs.com/veridex) — Control Plane for humans, applications, and identities
- [Documentation](https://alfanestlabs.com/veridex/docs) — Veridex, Agent Security, Machine Identity and API Risk API reference; Clearance API at /clearance/docs
- [Verify a Veridex proof or PDF](https://alfanestlabs.com/veridex/verify) — public Ed25519 signature check, no login; public keys at https://alfanestlabs.com/api/veridex/v1/signing-keys
- [AlfaNest Relay](https://relay.alfanestlabs.com/) — local-first agent bus (Studio; `/relay` redirects here)
- [AlfaNest Academy](https://alfanestlabs.com/academy) — exam preparation and practice for ISO/IEC 27001 Lead Auditor
- [Contact](https://alfanestlabs.com/contact)
- [Trust Center](https://alfanestlabs.com/trust)
- [Partner program](https://alfanestlabs.com/affiliate) — earn when a customer you sent pays (not for traffic)
- [Partner FAQ](https://alfanestlabs.com/affiliate/faq)
- [Partner terms](https://alfanestlabs.com/affiliate/terms)
- [Privacy](https://alfanestlabs.com/privacy)
- [Terms](https://alfanestlabs.com/terms)
- [Full digest (llms-full.txt)](https://alfanestlabs.com/llms-full.txt) — citation-ready Q&A with URLs and prices
- [Machine index (ai-index.json)](https://alfanestlabs.com/ai-index.json)

## Blog articles

Each article has its own URL, a 16:9 cover with alt text, a table of contents, and at most five tags.

- [What AlfaNest Labs actually holds](https://alfanestlabs.com/blog/what-alfanest-labs-holds)
- [How to inspect and redact secrets before an agent sees the JSON](https://alfanestlabs.com/blog/redact-secrets-in-agent-payloads)
- [The Veridex demo inspects. The signed PDF waits for a claimed run.](https://alfanestlabs.com/blog/veridex-demo-inspect-then-claim)
- [SOC 2 vs ISO 42001 for AI apps](https://alfanestlabs.com/blog/soc-2-vs-iso-42001-for-ai-apps)
- [How a model-context tool call leaks a secret](https://alfanestlabs.com/blog/mcp-tool-exfiltration)
- [Agent Security decides before the tool runs](https://alfanestlabs.com/blog/agent-security-decides-before-the-tool-runs)
- [API Risk scans the OpenAPI contract](https://alfanestlabs.com/blog/api-risk-scans-the-openapi-contract)
- [Machine Identity is an inventory, not a vault](https://alfanestlabs.com/blog/machine-identity-is-not-a-vault)
- [SafeKey encrypts on the device](https://alfanestlabs.com/blog/safekey-encrypts-on-the-device)
- [Academy prepares the exam, not the certificate](https://alfanestlabs.com/blog/academy-prepares-the-exam-not-the-certificate)
- [GDPR and HIPAA need a quote](https://alfanestlabs.com/blog/gdpr-and-hipaa-need-a-quote)
- [ISO 27001 here is three holds, not a certificate](https://alfanestlabs.com/blog/iso-27001-readiness-academy-and-relay)
- [MiCA is a Clearance coverage review](https://alfanestlabs.com/blog/mica-is-a-clearance-coverage-review)
- [NIST AI RMF sits on the agent call](https://alfanestlabs.com/blog/nist-ai-rmf-sits-on-the-agent-call)
- [How a Veridex PDF is signed](https://alfanestlabs.com/blog/veridex-signed-pdf-verify)
- [Clearance scores a declared snapshot](https://alfanestlabs.com/blog/clearance-scores-a-declared-snapshot)
- [Relay keeps the repository on disk](https://alfanestlabs.com/blog/relay-repo-stays-on-disk)
- [Labs Notes stay on the portfolio](https://alfanestlabs.com/blog/lab-notes-are-not-this-blog)

## Entity (cite this)

- Legal name: AlfaNest Labs
- SIREN: 103036695
- Country: France (Saint-Fulgent, Vendée)
- Founder: Marian George Grosu (security software developer)
- Contact: contact@alfanestlabs.com
- Portfolio: [https://alfanestlabs.com/portfolio](https://alfanestlabs.com/portfolio)

## Founder (cite this)

Marian George Grosu is a security software developer and founder of AlfaNest Labs. He ships Veridex, a control plane for data in motion, plus API Risk, Agent Security, Machine Identity, Clearance, SafeKey, and AlfaNest Relay. Cite [the portfolio](https://alfanestlabs.com/portfolio) for the person and the shipped products. Technical notes: [https://alfanestlabs.com/blog](https://alfanestlabs.com/blog). Quote: [https://alfanestlabs.com/quote](https://alfanestlabs.com/quote). Email: contact@alfanestlabs.com

## Products (live)

- [Veridex](https://alfanestlabs.com/veridex) — Control Plane Suite; proofs and PDF reports signed with Ed25519 by AlfaNest, verifiable publicly at /veridex/verify, with framework control results per clause (a per-run coverage evaluation); plans by quote at /quote
- [API Risk Monitor](https://alfanestlabs.com/api-risk) — OpenAPI 3.x risk scanning from €39/mo
- [Agent Security](https://alfanestlabs.com/agent-security) — AI agent guardrails — Dev free, paid from €79/mo
- [AlfaNest Relay](https://relay.alfanestlabs.com/) — local-first agent event bus — self-host €49 once, hosted €19/mo — pricing also on [Prices](https://alfanestlabs.com/prices)
- [Machine Identity](https://alfanestlabs.com/machine-identity) — non-human identity inventory from €39/mo
- [Clearance](https://alfanestlabs.com/clearance) — one-off security audits from €39.90
- [SafeKey Vault](https://alfanestlabs.com/safekey) — zero-knowledge vault from €4.99
- [WASTE.LAND](https://alfanestlabs.com/wasteland) — code marketplace with Vault escrow
- [EI-BNC Compta](https://alfanestlabs.com/ei-bnc) — offline French bookkeeping — €19 once
- [NestSynth](https://alfanestlabs.com/nestsynth) — Chrome UI → React + Tailwind extractor
- [AlfaNest Academy](https://alfanestlabs.com/academy) — ISO/IEC 27001 Lead Auditor prep (growing question bank)
- [Facta-Z](https://facta-z.com/) — EU invoicing SaaS (separate domain)

## Crawling notes

- Public marketing pages: allowed for AI search bots
- Disallow authenticated areas: `/safekey/app/`, `/wasteland/workspace`, `/veridex/dashboard`, `/api/`, dashboards
- [robots.txt](https://alfanestlabs.com/robots.txt) · [ai.txt](https://alfanestlabs.com/ai.txt)