Architecture Overview
🔧 Technical8 min readUpdated May 2026
System Overview
Gridlock is built as a multi-agent AI system where specialized agents work together to protect MSP client networks. Each agent is an independent unit with its own expertise, but they share intelligence and coordinate responses.
🌐 Network
Client endpoints
🔌 Connector
Lightweight agent
Agent Pipeline
When data flows in from the network, it goes through a processing pipeline:
- Data Collection — The connector captures network traffic, system logs, endpoint data, and configuration snapshots
- Normalization — Raw data is parsed into a standardized format the agents can understand
- Routing — Data is routed to the appropriate agent based on type (network data → MSP Hunter, threat intel → Threat Researcher, etc.)
- AI Processing — Each agent uses Z.AI GLM-5 to analyze data, identify patterns, and make decisions
- Action — Agents take automated actions: block threats, generate tickets, update compliance scores, alert technicians
AI Provider
Gridlock uses Z.AI GLM-5 as its AI backbone. This gives us:
- Fast inference — Sub-second response times for threat detection
- Context awareness — Each agent maintains context about your specific environment
- Continuous learning — Agents improve their detection based on your network's patterns
- Cost efficiency — Enterprise-grade AI at a fraction of traditional SIEM costs
Data Flow & Security
🔒 Security First
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). The connector never stores credentials. API keys are scoped to minimum required permissions.
Data flows through a secure pipeline:
- Encrypted collection from endpoints via the connector
- TLS-encrypted transmission to the Gridlock cloud
- Processing in isolated agent environments
- Results stored in encrypted databases
- Dashboard access via authenticated sessions
Multi-Tenant Architecture
Each MSP gets a fully isolated environment. Your clients' data never touches another MSP's data. This is achieved through:
- Database-level tenant isolation
- Per-tenant encryption keys
- Scoped API access
- Separate agent contexts per client