MagenTrust + Citrix: Verifying Who's Inside the Workspace

Citrix Secure Private Access provides zero trust access to web, SaaS and private apps and desktops, with adaptive authentication, device posture and session security controls, and relies on an external identity provider such as Entra ID, Okta, Google or a SAML IdP. MagenTrust verifies who is working inside the workspace session: it scores live behavioral signals continuously and returns a PASS, CHALLENGE or INTERRUPT before each consequential action, from a runtime inside your perimeter with no data egress. MagenTrust can also fill the identity provider role itself, with smart card and certificate-based authentication using an existing CA or its embedded CA.

MagenTrust home

MagenTrust: Continuous Identity Assurance

MagenTrust applies Shannon entropy and probability distribution modeling to behavioral signals to generate a continuous human confidence score throughout a session. Keystroke dynamics, interaction timing, scroll patterns, and mouse movement are processed ephemerally into scores. No biometrics are required and none are stored. MagenTrust integrates with existing biometric systems when needed.

MagenTrust protects human-operated user interfaces and machine-to-machine connections across REST APIs, MCP, agents, services, and autonomous workflows. Behavioral signals verify the human behind a session. Policy APIs and MagenMCP bind authorized machines and agents to the same deterministic decision layer. Three outcomes: PASS (authorized action), CHALLENGE (low-friction micro-interaction requested), INTERRUPT (action blocked and escalated). Target verticals: financial services, defense, automotive, critical infrastructure.

Products

MAGEN Gate - Human Presence at Entry
MAGEN Miner - Interaction Intelligence
MAGEN IAM Guard - Continuous Trust Signals
MAGEN Safe Training - AI Model Protection
MAGEN Dead Zone - Hard Boundaries
MAGEN SDK & Control Plane - Programmable Trust
MagenMCP - Verification at the Point of Agentic Action
Human Exclusion Zone - Verified Machine-Only Execution

MagenMCP

MagenMCP is MagenTrust's server-side MCP integration. When an LLM agent reaches a sensitive action, it calls MagenTrust via MCP before proceeding. The MCP server evaluates current human authority when policy requires it, validates the machine context, and returns a PASS, CHALLENGE, or INTERRUPT signal before the API action executes.

Human Exclusion Zone (HEZ)

A Human Exclusion Zone is a declared perimeter around an autonomous workflow where MagenTrust continuously monitors for human behavioral signals and enforces machine-only execution policy. Inside an HEZ, the trust model inverts: human signal equals INTERRUPT, no human signal equals PASS.

© 2026 MagenTrust (Suttin Technologies Inc.) All rights reserved.

Privacy Policy Terms of Service Security