A-101 Cover sheet — identity & scope
McKinney TX · rev 04
McKinney TX · rev 04
The Kryos platform
Secure every entry. Connect every system.
Kryos designs, installs, and supports modern access control and biometric entry — then proves it door by door.
SCOPE. ATLAS reads the system. EdgeBox proves it at the door. FieldForce moves the work. Defender guards the servers behind it. SpecSentry catches it in the drawings before anyone buys hardware.
Plate 01 — identity mark, assembled · 10.0 s · no audio
Example site snapshot — what a Kryos handover reports on
- Platform detected
- AMAG Symmetry M4000 · panel 3
- EdgeBox
- Capturing OSDP 9600 8N1
- Doors online
- 216 / 218 2 in maintenance
- Secure channel
- SCBK-D 1 re-key pending
- Last dispatch
- WO-4471 09:51:30 · FieldForce
- Evidence
- 100% door-by-door, 4 phases
OSDP secure hardwareUL 294 listed componentsNDAA-compliant hardwareONVIF-conformantPrivacy by designLicensed & insured
Everyone else ships a picture of a console. This is the record.
This is the commissioning record format — set as text, not pasted in as a screenshot. Reader address, credential format, OSDP secure-channel state, and the exact reason a door did what it did. Your turnover package looks like this, with your doors in it.
An unpatched ACS server with a stale certificate is a physical security problem, not just an IT one.
| Timestamp | Door | Reader | Event | Credential | OSDP | Result |
|---|---|---|---|---|---|---|
| 09:41:07.220 | D-114 | RDR-114A | Access granted | Mobile / BLE | SCBK-D | Granted |
| 09:41:52.884 | D-114 | RDR-114A | Door held open 32 s | — | SCBK-D | DHO |
| 09:42:03.101 | D-207 | RDR-207A | Access denied | Card 26-bit | SCBK-D | Schedule |
| 09:42:44.019 | D-207 | RDR-207A | Access granted | Card + PIN | SCBK-D | Granted |
| 09:47:16.552 | PANEL-03 | — | Comms fault · poll timeout | — | — | Offline |
| 09:47:19.008 | PANEL-03 | — | EdgeBox attached · capture started | — | 9600 8N1 | Capture |
| 09:48:02.377 | PANEL-03 | RDR-301B | Secure channel re-key failed | — | Key mismatch | Fault |
| 09:51:30.640 | PANEL-03 | RDR-301B | ATLAS dispatch → FieldForce WO-4471 | — | — | Dispatched |
| 10:14:55.902 | D-118 | RDR-118F | Face template match · consent on file | Biometric | SCBK-D | Granted |
| 10:15:41.310 | D-118 | RDR-118F | Tamper loop opened | — | SCBK-D | Tamper |
| 10:22:08.774 | D-402 | RDR-402A | REX egress · fail-safe verified | — | SCBK-D | Pass |
| 10:26:33.415 | D-402 | RDR-402A | EOL resistor 1k0 confirmed | — | Supervised | Pass |
The control layer
Kryos ATLAS™ — the technical brain behind every Kryos system.
Access Technology Live Assistance System. ATLAS is an AI copilot grounded in a curated ACS and VMS knowledge base — AMAG Symmetry, Lenel OnGuard, C•CURE 9000, Genetec, Milestone, and the cloud platforms small businesses actually run. It knows what an M4000 is, it knows OSDP, and it knows when to tell a tech to stop and escalate.
Pin the platform first
Every session starts by confirming system and version, so retrieval stays scoped and Lenel steps never surface on an AMAG call.
Grounded, cited answers
Procedural guidance cites the knowledge-base section it came from. Below the confidence threshold, ATLAS says so and offers escalation instead of guessing.
Work that moves
Unresolved sessions generate an ATLAS Dispatch summary — site, platform, symptom, steps attempted, suspected fault, parts likely needed — and hand off to FieldForce.
Guardrails and audit trail
Life-safety refusals run as deterministic filters outside the model, not just prompt text. Every query and admin action is logged.
The Kryos suite
Seven applications. One platform.
Each app solves a real problem on its own. Connected, they cover the full arc of a security system — diagnose it, dispatch it, protect it, and prove it.
Control layer
In beta
Kryos ATLAS™
The AI field partner for access control and video surveillance. Grounded, cited troubleshooting across AMAG Symmetry, Lenel OnGuard, C•CURE 9000, Genetec, Honeywell, Milestone, Avigilon, Exacq, and Hanwha — plus the cloud platforms SMBs run day to day. Four modules: Core, OSDP Advisor, Vault, and Dispatch.
Retrieval-groundedOSDP AdvisorLife-safety guardrailsDispatch summariesTenant-isolated Vault Request ATLAS early access →
Work layer
Live
FieldForce
Field coordination, technician workflows, and service records. ATLAS Dispatch summaries arrive here already written — site, platform, symptom, steps attempted, parts likely needed — so escalations land prepared instead of blank.
Work ordersATLAS-linkedService history Explore FieldForce →
Security layer
In beta
Kryos Defender
Physical security runs on Windows servers that nobody patches. Defender scans the machines behind your ACS and VMS — YARA rule matching, PE binary inspection, file-hash reputation, and certificate validation — and exports findings as an audit-ready report.
YARA rulesPE analysisCert validationCSV audit export Ask about Defender →
Identity layer
Live
Secure Vault
Protected operational workflows and secure identity handling for higher-assurance environments and sensitive actions.
Least privilegeAudit logged Open Secure Vault →
Access logic
Live
M4000 Logic Link
Access-control logic and credential-workflow support for teams running AMAG Symmetry M4000 and M2150 hardware.
Credential logicAMAG Symmetry Open Logic Link →
Customer layer
Live
Iron Vault Guard
The customer-facing assistant behind Kryos ChatService Bot — approved knowledge sources, human escalation, and hard boundaries around codes, badge data, and emergency procedures.
Approved KBHuman escalation See ChatService Bot →
Design QA layer
Live
SpecSentry
AI quality control for physical security design. SpecSentry reviews drawings, schedules, and Division 28 specs against 60+ recurring failure modes — and a commissioning engineer validates every finding before it reaches you.
Div 28 reviewCode checksCost-ranked findings48-hr turnaround Explore SpecSentry →
IntelligenceKryos ATLASReads the system and tells the tech what is actually wrong.
Design QASpecSentryReviews the drawings before anyone buys hardware.
Field executionFieldForceMoves the work: dispatch, technicians, parts, invoices.
Operator trainingKryos AcademyTeaches your team to run AI agents with discipline.
Live apps open on Kryos-controlled external domains. Never submit passwords, access codes, or customer secrets to any tool.
Hardware
Kryos EdgeBox — the test set the trade never got.
A portable field appliance for diagnosing, simulating, and validating access-control circuits at the door: Wiegand, OSDP, relay outputs, and supervised inputs. Instead of guessing whether the reader, the wire, or the panel is at fault, you measure it — then hand the capture to ATLAS.
- Read and simulate Wiegand and OSDP traffic on a live line
- Verify OSDP addressing, baud rate, and Secure Channel handshake
- Exercise relay outputs and supervised-input EOL resistor states
- Capture results as commissioning evidence, not clipboard notes
- Session data feeds ATLAS for interpretation and FieldForce for the record
ProtocolsWiegand, OSDP v2 Secure Channel, dry-contact relay, supervised inputs
InterfaceOn-device web app with a documented serial protocol
Built forCommissioning, OSDP migration, and pre-dispatch triage
StatusIn development — hardware and software in active build
Core solutions
One disciplined partner for the systems that control access, identity, and uptime.
Concept render
Access control
Biometric entry
Infrastructure
Access control
Credential every door, badge to mobile
Controllers, readers, schedules, audit trails, and clean turnover documentation.
OSDPMobile credentialAudit trail Explore access control →
Biometric entry
Touchless identity, deployed responsibly
Consent, signage, fallback access, retention controls, and operator oversight.
Consent-basedFallback accessPrivacy-first See biometric approach → Concept render
Infrastructure
The network that keeps security online
Switching, VLANs, PoE, DNS, NTP, and firewall paths verified before cutover.
PoE / VLANFirewallMonitored See the operating layer → Kryos ChatService Can visitors request after-hours access? I can explain your approved visitor policy and route exceptions to your manager. No codes, badge data, or emergency procedures accepted. SMB support botCustomer answers with security boundaries
A trained chat assistant bundled with recurring security service, approved knowledge sources, and human escalation.
Approved KBEscalationService contract Explore ChatService Bot →Secure operating layer
Designed like infrastructure, not a one-time install.
Kryos plans around the real dependencies that make physical security succeed — power, PoE budget, VLAN design, controller placement, credential policy, admin training, and support escalation.
- Controller, reader, and lock workflows mapped before deployment
- Network readiness for PoE, VLANs, DNS, NTP, and firewall paths
- Documentation and admin handoff so the system stays manageable
- Least-privilege configuration with clean, auditable remote access
How we work
A field-tested path from risk review to long-term support.
- 01
Assess
Entry points, existing wiring, locks, panels, network path, and the workflows your team actually uses.
- 02
Architect
Hardware, credentials, schedules, cloud management, remote support, and privacy controls designed as one system.
- 03
Deploy
Clean configuration, functional and fail-safe testing, event validation, and hands-on administrator training.
- 04
Operate
Documentation, health reviews, change control, and a clear escalation path long after cutover.
Kryos Academy
AI Agent Command™ — manage AI agents like infrastructure.
The discipline behind ATLAS, packaged as a nine-module course: delegation, oversight, guardrails, orchestration, measurement, and governance — plus a specialization for security integrators. Built where a wrong answer can unlock a door.
Common questions
What facility teams ask us first.
Do you replace our existing access-control system or work with it?
Both. We survey what you have, tell you honestly what is worth keeping, and design a migration path that minimizes downtime and avoids rekeying the whole building at once.
Is facial recognition appropriate for our facility?
Sometimes. Biometrics fit restricted rooms and high-throughput entries where stronger identity assurance justifies the privacy requirements. For many doors, mobile credentials or PINs are the better answer — we help you decide before you buy hardware.
Do you handle the network side, or just the doors?
Both. Physical security fails when the network under it is an afterthought. We verify PoE budget, VLANs, DNS, NTP, and firewall paths so controllers and readers stay reachable and reliable.
Can Kryos build a customer support bot for our business?
Yes. Kryos ChatService Bot gives small and midsize businesses a controlled customer-answering assistant trained only on approved knowledge base material, with human escalation and a recurring security service contract behind it.
What do we get when the project is done?
Commissioning evidence, door-by-door test results, clean turnover documentation, administrator training, and a support plan — not just installed hardware.
What is Kryos ATLAS, and how is it different from ChatGPT?
ATLAS is an AI technical assistant built only for access control and video systems. It confirms your platform and version before answering, retrieves from a curated ACS/VMS knowledge base, cites the section every procedure came from, and refuses life-safety modifications through filters that run outside the model. A general chatbot will confidently invent reader wiring; ATLAS is built specifically not to.
Do we have to move off Wiegand to OSDP?
For new installations, effectively yes — the Security Industry Association states Wiegand is no longer a viable option, and federal facilities under FIPS 201/FICAM requirements have hard drivers. Existing sites can migrate in phases using converters and mixed-mode panels. The ATLAS OSDP Advisor walks the assessment, addressing, baud, Secure Channel key provisioning, and verification testing.
Why does an access-control company scan Windows servers?
Because your access control and video management systems run on them. An unpatched ACS server with a stale certificate is a physical security problem, not just an IT one. Kryos Defender scans those machines and produces a report you can hand to an auditor.
Request assessment
Ready to modernize access at your facility?
Tell us what you are trying to secure. We will review the request and recommend the next practical step — site review, demo, modernization plan, or support conversation.
Security note
Do not submit passwords, access codes, badge data, floor plans, or emergency procedures through this form.