company

The layer that holds what was declared against what actually happens.

Themis is the titan of divine law and natural order. That is the whole product in one word — and the reason the company stamps its own marketing.

0100 principles

Five things you can hold us to.

Verified before enforced. — a policy reaches enforcement only after surviving traffic it never saw. Nothing is trusted because it was generated confidently.
Evidence, never authority. — what ran while we watched describes your estate; it does not authorise it. Only a declared change may widen policy.
A person decides the sensitive cases. — sensitive flows are never auto-allowed and never silently dropped. They wait for a named human, and the decision is stamped user · time · event.
Gates that can fail. — every check is run against a seeded defect to prove it can go red. A gate that cannot fail is theater.
Say the hard part out loud. — every capability on this site is tagged for what it needs, and the limits are published next to the claims. A company selling verification cannot be the one place it is not applied.

0200 who builds it

Early-stage, and precise about it.

Themis is based in Marseille, France, and founded by a carrier-backbone engineer — SRv6, firewall and NAT at Bell Canada — later Director of Platform & AI Engineering, growing an org from 10 to 60 in a year, with two startups founded and acquired.

The method exists because the same failure kept appearing from both seats: everyone can describe the segmentation they intended, and nobody can show what is actually enforced without rebuilding it by hand, months late.

e000 End.DT6 deliver

See it against your own kit.

30–60 minutes. Read-only. We compare your declared intent to what is actually running, and hand back the gap list.

Based in Marseille — happy to meet in person in the south of France, remote anywhere.

See it on your estate — read-only