Home/Products/FORGE
GOVERNED AGENTIC DELIVERY
Agents propose, humans approve
FORGE turns ideas into production-grade, regulator-ready software. Supervised AI agents do the work, people sign every gate, and compliance is built in from day one.
01 / THE PROBLEM
Speed without governance is a liability
Code is now produced faster than anyone can check it. Rework, security gaps and audit exposure grow with every release nobody signed off. In the Kingdom, NCA, PDPL, NDMO and NORA all ask for evidence that most teams can only produce by hand, after the fact.
of AI-generated code samples failed security tests, introducing OWASP Top 10 vulnerabilities.
Veracode, 2025more issues in AI-generated code than in code written by people.
CodeRabbit, 2025of agentic AI projects will be cancelled by the end of 2027.
Gartner, 2025the cost of fixing a defect in live operation, against fixing it at requirements.
Baziuk 1995, cited in NIST Planning Report 02-3, table 1-502 / THE GAP
AI rewired one phase and left the other four behind
Every phase of enterprise delivery runs on its own tools, and none of them talk to each other. AI has made one phase faster. It has not joined them up, so the controls still break every time work changes hands.
Portfolio and demand management tools rank the ideas, but the business case stays in a document. Its value, scope and assumptions never travel into the phases that follow.
03 / THE FACTORY
From business intent to governed software
Specialised agents work across the whole lifecycle. A person approves every decision that carries accountability, and controls are enforced at every gate.
INPUTS
OUTPUTS
04 / HOW IT WORKS
Agents propose, humans approve
AGENTS PROPOSE
Agents read your goals, your existing systems and the regulations that apply. They draft the business case and use cases, prioritise the projects and build the roadmap.
HUMANS APPROVE
The portfolio manager approves the budget, timelines and priorities, and decides what gets built and what does not. The enterprise architect signs off the business case and confirms there is capacity to deliver it.
Portfolio manager · Enterprise architect05 / REGULATION PACKS
One engine, every regulation as a pack
A law, a control framework, a standard and a reference architecture bind at different points in delivery. So each is packed differently, and one engine enforces them all.
Governs how you build.
Issued by the National Cybersecurity Authority and binding on government entities and critical national infrastructure. ECC-2:2024 sets 108 controls covering governance, defence, resilience and third-party risk.
HOW FORGE PACKS IT
Packed as blocking gate criteria at the stage where each control applies, so secure development, identity, cryptography and logging are proven as the work happens.
Each framework is decoded into one schema of process areas, control identifiers, evidence requirements and terms.
Controls are bound to the lifecycle stages where they apply, as gate criteria with blocking conditions, evidence templates and approval routing.
Gates resolve against the project: risk, data classification, sector and past outcomes change what a control demands.
One gate run satisfies several frameworks at once, resolving overlaps and conflicts and producing one set of evidence.
EVERY PACK HOLDS
06 / THE PLATFORM
Sixteen features, one platform
Delivery, AI generation, governance and compliance, built to work as one system rather than a stack of tools you assemble yourself. Select any feature.
Delivery persona interfaces
Role-specific views for the CTO, developer, tester and compliance officer, each showing the live delivery pipeline and the measures that matter to them.
07 / THE VALUE
81% less, modelled on a real portfolio
This is a modelled example, not a client engagement. It takes a Saudi national government digital portfolio: five real, publicly confirmed products from 2019 to 2026, costed product by product with traditional delivery and with FORGE.
A team of 4 instead of 15. An open-source stack replaces the content management licence.
Cold start falls from 3 to 6 weeks to 3 to 5 days.
Large IT projects run 45% over budget and deliver 56% less value than predicted, across more than 5,400 projects.
A brief gate locks scope before code.McKinsey and University of Oxford, 2012The longer a defect stays in, the more it costs. A study NIST cites puts a defect found in operation at 470 to 880 times the cost of one found at requirements.
Governance gates catch defects before release.Baziuk 1995, cited in NIST Planning Report 02-3, table 1-5Separate procurement cycles in the traditional model, one for each product, before any productive code is written.
One platform team runs the whole portfolio.Arkitekt modelled case studyof institutional knowledge is unique to the person in the role and not shared, so it leaves with every team rotation.
Memory carries every project into the next.Panopto Workplace Knowledge and Productivity Report, 201808 / THE MOAT
Software can be copied, the process and the data cannot
Our moat is how we deliver: the process for every phase, and the experience of making regulation work in practice. Then the record itself: the data from every project, connected. Each pass round the loop adds data and strengthens the links, so the next project starts further ahead. Select any part of the loop.
The stronger the connections, the better the next delivery. And the record stays with you. It does not leave when a consultancy or an engineering team does.
09 / BUILT FOR THE KINGDOM
Runs in Saudi Arabia, as cloud SaaS or on-premise.
Arabic and English in the platform, in the documents it writes and in the software it delivers. No dependency on a single model provider.
10 / NEXT STEP
