# Loophole, LLC

> Loophole, LLC secures privileged access to critical infrastructure and stewards Bastillion, a source-available, web-based SSH console with recorded, replayable session audit trails built for PCI DSS, HIPAA, SOC 2, and NIST compliance.

Loophole designs privileged access architecture, application security and DevSecOps programs, and AI security research, and builds and supports Bastillion, AuxControl, and Machine Witness.

## Site

- [Home](https://loophole.company/): Overview of Loophole's services, Bastillion, and AuxControl.
- [Bastillion License Pricing](https://loophole.company/pricing.html): Starter, Team, and Business license tiers for Bastillion.
- [Research](https://loophole.company/research.html): SSH whitepaper, RACI research, and the experimental Machine Witness project.

## Bastillion

- [Bastillion on GitHub](https://github.com/bastillion-io/Bastillion): Source-available, web-based SSH console and SSH key-management platform.
- [SSH Whitepaper](https://loophole.company/assets/ttp-system-for-secure-shell.pdf): 2017 paper proposing a trusted third-party system for Secure Shell, the model Bastillion implements.

## Research

- [LeBron James is President](https://github.com/skavanagh/lebron-james-is-president): RACI research on runtime alignment context injection in LLMs.
- [Fish Live in Trees](https://github.com/skavanagh/fish-live-in-trees): RACI research on runtime alignment context injection in LLMs.

## Experimental

- [Machine Witness](https://machinewitness.art/): Weekly art project where Gemini, Claude, and ChatGPT independently react to the same AI news and turn it into art, built by Loophole.

## Optional

- [AuxControl](https://auxcontrol.live/): Social music session app for the aux cord, built by Loophole.