Live at a European energy infrastructure operator

When production breaks at any layer, AI agents investigate. Rooca delivers a verdict.

Dozens of adversarial AI agents — anchored by a Prosecutor, Defender, and Judge — investigate causes across application and hardware. Deterministic confidence scoring. Every verdict is defensible.

Deployed inside your VPC · Your data never leaves · Full audit trail

From your transaction to your transceiver. One Tribunal verdict, full stack.

APPLICATION LAYER What most AI tools watch Transaction Application Containers THE API LINE where most AI tools stop HARDWARE LAYER Where outages actually begin Servers Hardware Network ROOCA · ONE VERDICT, FULL STACK
Pilot Customer
European Energy Infrastructure
Critical infrastructure · DORA-regulated
Mean Time to Resolution
4h11min
First enterprise pilot, verified
Industry Downtime Cost
$2M+ per hour
Global 2000 average, 2025
The old way

Your 3:30 AM war room,
obsolete.

Pager fires. Bridge opens. Five engineers pile into a Slack thread. Two hours of scrollback, one hand-off to someone less qualified, a postmortem nobody trusts. Rooca delivers the verdict before the second pager fires.

03:28. Your pager fires. Don't wake your team.

5 0
Engineers pulled in at 3am
4h 11min
Time to verdict
Defensible
DORA-ready audit trail
How it works

Three AI agents deliberate.
One defensible verdict.

Here is exactly how the Tribunal Engine works.

01

Alert received

An incident alert fires from your monitoring stack, or an engineer manually triggers an investigation. The Evidence Collector Agent ingests the alert context and begins gathering evidence.

02

Prosecutor agent builds the case

The Prosecutor gathers evidence from logs, metrics, traces, deployment histories, and code changes. It formulates a root cause hypothesis and assembles supporting evidence through structured analysis.

03

Defender agent challenges

The Defender actively seeks counter-evidence, not as a formality but as adversarial challenge. It identifies contradictions, alternative explanations, and gaps in the argument.

04

Judge agent adjudicates

The Judge evaluates both sides using deterministic scoring technology. It produces a composite confidence score that is reproducible: same evidence, same score. Every time.

05

Verdict delivered

The confidence-scored verdict is delivered with the complete reasoning trail: what the Prosecutor argued, what the Defender challenged, how the Judge adjudicated. Full audit trail. Defensible to auditors.

Deterministic scoring: same evidence, same confidence score. Every time. Auditable by your regulators.
The output, delivered

Deterministic root cause.
Delivered where you already work.

Rooca runs in your VPC. The verdict lands in Slack, routes through PagerDuty, and arrives as a DORA-ready audit document. Same evidence, same score, every time.

! INCIDENT PROSECUTOR AI agent DEFENDER AI agent JUDGE AI agent Root Cause: Memory leak · Confidence 88.1%
Example 01 · Cross-layer cause

From the failed transaction down to the hardware that caused it.

A 503 error on the application. Rooca traced the chain through five connected signals and predicted the failing hardware component 14 minutes before customers saw the outage. App-only tools would still be looking at the wrong layer.

Application
503 error
checkout API
Containers
Container eviction
resource contention
Servers
Workload failover
host marked degraded
Hardware
Cooling system alert
temperature anomaly
Predictive
Storage component wear
detected 14m prior
Recommended action: failover the workload before the hardware fails · Application code confirmed clean
#sre-oncall Today at 03:18
R
Rooca APP 3:18 AM
Incident resolved · verdict delivered
Payment checkout latency P95 → 12.4s. Deterministic confidence 88.1%.
Root cause: Kubernetes NetworkPolicy throttling between checkout-svc and payments-db namespaces.
SeverityHIGH
Sourcezabbix · datadog
Time to verdict2m 38s
Status✓ resolved
CONFIDENCE 88.1%
View full verdict →
✓ 3 👋 2
Example 02 · Application-layer

Slack · as it arrives

The verdict lands where your team already coordinates. Confidence score, cited sources, actionable summary. Zero dashboard context-switching.

Incident verdict · Rooca Tribunal
Payment checkout P95 latency spike — 12.4s sustained over 8 min
INC-2026-0418-0317 · checkout-svc v2.4.1 · eu-west-2

Kubernetes NetworkPolicy deployed 22 min prior to incident restricted egress from checkout-svc to payments-db namespace. 94% of checkout requests blocked at connection establishment. Database itself operating nominally — downstream victim, not root cause.

SeverityHIGH
MTTR11 min
Guilty componentnetpol/restrict-egress
Alternate hypotheses3 rejected
Deterministic confidence 88.1%
Log correlation0.91
Metric anomaly0.86
Deploy linkage0.92
Counter-evidence0.84
DORA Art. 17 · reasoning trail attached Signed · reproducible

The verdict · DORA-ready

A signed root cause document with full confidence decomposition and a reasoning trail auditors can replay. Same evidence, same verdict. Every time.

Resolved
Q2X8K4M · resolved 11m after trigger
[P1] checkout-svc — P95 latency > 10s (8 min sustained)
Service
checkout-svc
Urgency
HIGH
Assigned
sre-oncall
Status
resolved
Rooca auto-triage
Root cause identified · NetworkPolicy egress restriction. Confidence 88.1%. Handoff note attached for responder.
03:07Triggered · zabbix alert
03:07Rooca began investigation
03:10Verdict delivered · 88.1%
03:18Resolved by sre-oncall

PagerDuty · auto-triaged

When the responder acknowledges, the investigation is already done. Rooca's verdict is attached to the incident before the human reads the first log line.

The numbers behind the verdict.

4h11min

Mean time to resolution at a European energy infrastructure operator. First enterprise pilot.

$200M

Annual downtime loss per Global 2000 enterprise. Roughly 9% of operating profit.

95.5%

Reduction in senior engineer investigation time per incident.

Pilot numbers are from a production deployment, not a demo environment. Industry numbers are sourced from public Global 2000 reporting.

Typical AI SRE · SaaS model

Your VPC
production data
External SaaS
vendor platform
! Data exfiltration risk

Rooca · VPC-native

Your VPC • AI agents
no data leaves perimeter
+ Zero exfiltration · deterministic scoring
Architecture as compliance

AI agents inside your VPC.
Your data never leaves. By design.

The Tribunal Engine runs as AI agents inside your virtual private cloud. No SaaS relay, no external API calls carrying your telemetry, no model training on your data.

Every agent session produces an immutable audit trail: evidence gathered, hypotheses formed, challenges raised, and the deterministic confidence score computation.

Deterministic scoring ensures confidence outputs are reproducible. Same evidence, same score. Every time. Auditors and regulators can verify this independently.

DORANIS2EU AI Act OSFI E-23HIPAASOC 2 Type II
Compared to cloud-bound AI SRE agents

Single-cloud AI SRE agents (for example, Microsoft Azure SRE Agent) are explicitly bound to their host cloud. For a regulated enterprise running hybrid infrastructure — on-prem VMware, sovereign cloud, multi-cloud, or substrate hardware — a cloud-bound tool cannot see where the root cause actually lives. Rooca's VPC-native architecture works across all of them.

Beyond the API line

Most AI tools stop
where your infrastructure starts.

Hardware fails too. When the cause is a failing server, a cooling fault, or a network device, software-only AI tools cannot find it. Every minute they look at the wrong layer is downtime. And downtime costs enterprises more than $2M an hour.

What software-only AI tools watch
Transaction
Application
Containers
Cloud platform
The API line
Where outages actually begin
Hypervisor
Servers
Hardware sensors
Network devices
Rooca · One verdict, full stack

At $2M an hour of downtime, you cannot afford to look in the wrong place. Rooca follows the cause from the failed transaction all the way down to the hardware that caused it. One verdict. Every minute saved counts.

Regulatory architecture

Built for the regulations
your auditors actually enforce.

DORA

Article 17(2)

NIS2

Article 23

EU AI Act

Effective 2027

OSFI B-13 & E-23

Effective May 2027

HIPAA

PHI protection

VPC deployment · deterministic scoring · full audit trails. Built into the architecture, not bolted on.

Autonomy gating

AI agents running the investigation.
Deterministic confidence gating autonomy.

Each AI agent builds on the last. The Tribunal's strategies are self-evolving, with confidence thresholds determining how much autonomy each agent earns.

Current

Investigate

AI agents gather evidence, debate hypotheses, and deliver confidence-scored verdicts. The human engineer reviews and decides.

Beta

Chat with Systems

AI agents answer natural language questions about system state, grounded in real evidence from your infrastructure.

Beta

Predictive Maintenance

AI agents analyze patterns across historical incidents and telemetry baselines to identify failure conditions before they escalate.

Beta

Autoprovisioning

AI agents propose infrastructure actions with confidence-scored justifications. The human approves before execution.

Vision

Self-Healing

AI agents execute remediation autonomously when confidence exceeds threshold. Every action is logged, reversible, and bounded by policy.

“You would not give a new engineer root access on day one. Rooca works the same way. AI autonomy is a function of demonstrated accuracy, measured by deterministic scoring. Not assumed by default.”
Etymology

Rooca

/ˈruː.kə/ · noun · 瑠羽花 · ruuka
ROOCA
A contraction of ROOt CAuse. The name says exactly what the platform delivers.
Roo
Also the kangaroo. Speed, agility, and the leap across your infrastructure.
ca
The core promise: root cause, delivered.
瑠羽花
In Japanese, Rooca renders as three kanji: (ru) — lapis lazuli, the stone of truth; (u) — wing, the leap across systems; (ka) — flower, the root cause brought to light.

When Rooca delivers a verdict, it is not a guess.
It is the stone of truth.

Integrations

Plugs into your existing stack.
Replaces nothing. Reasons about everything.

Rooca's plugin-based evidence collection architecture spans application observability, cloud platforms, server and storage hardware, network telemetry, and incident workflow. Hardware signals are first-class evidence, not afterthoughts.

Rooca uses the Model Context Protocol (MCP) as its ingest contract. Application traces and hardware sensors become peer evidence nodes in the Tribunal.
Observability
DatadogGrafana PrometheusNew Relic SplunkZabbix OpenTelemetry
Server & Hardware
Server health sensorsPower telemetry Cooling telemetryFirmware events
Storage & Network
Storage controllersHypervisor events Network device telemetry
Cloud Platforms
AWSMicrosoft AzureGoogle Cloud
Incident Management
PagerDutyOpsGenieRootly
Communication
SlackMicrosoft Teams
Code & Deployment
GitHubGitLab
Orchestration
KubernetesHelm
Built for your role

Every role in the reliability chain.

For CISOs and Compliance Leaders

AI you can defend to your board. And your auditor.

How do I explain this AI to regulators?

Every Tribunal verdict includes a complete reasoning trail. EU AI Act transparency requirements are satisfied by the architecture.

Where does our data go?

Nowhere. Rooca deploys inside your VPC via Kubernetes Helm chart. No SaaS relay. No model trained on your data.

Can the AI hallucinate?

The Defender agent is structurally incentivized to find contradictions. Deterministic scoring ensures confidence reflects actual evidence strength.

Explore Rooca
For VP Engineering and Platform Leaders

Cut MTTR without cutting corners. Or headcount.

Will this actually reduce on-call burden?

Our first enterprise pilot reduced senior engineer investigation time by 95.5% per incident.

How long to deploy?

Rooca ships as a Kubernetes Helm chart. Initial deployment to first verdict typically takes days, not months.

What if the Tribunal gets it wrong?

Every verdict includes a confidence score and full deliberation record. Low-confidence verdicts are flagged for human review.

Explore Rooca
For SREs and Reliability Engineers

Your on-call teammate that shows its work. Every time.

Is this another AI summarizer?

No. Rooca actively gathers evidence, forms hypotheses, challenges them with counter-evidence, and adjudicates through deterministic scoring.

Can I trust it enough to go back to sleep?

The confidence score is the trust signal. High-confidence verdicts with resolved contradictions are reliable.

Does it work with my stack?

Datadog, Grafana, Prometheus, Zabbix, PagerDuty, Slack, GitHub supported out of the box. Custom plugins supported.

Explore Rooca
The Rooca Journal

Causal intelligence
for regulated operations.

Recognized by the ecosystem that builds enterprise AI

Backed by leading deep tech accelerators and enterprise AI programs across the US and Canada.

Events & Global Presence

Where autonomous AI converges.

Rooca operates among the gatherings shaping autonomous AI, enterprise infrastructure, and the regulated software stack.

New York May 4–5, 2026

AI Agent Conference 2026

The definitive gathering for autonomous and agentic AI systems. Founders, infrastructure engineers, enterprise leaders, and researchers shaping production-grade agents.

Agentic Systems Enterprise AI
Vancouver May 11–14, 2026

Web Summit Vancouver 2026

One of the world’s leading technology conferences. Founders, investors, and operators exploring the future of AI infrastructure and enterprise software.

Global Infrastructure Founders & Operators
Toronto May 25–29, 2026

Toronto Tech Week 2026

A citywide gathering of founders, builders, investors, and operators shaping Canadian technology and the next generation of AI innovation.

Autonomous AI Founders & Operators
Toronto May 26, 2026

AI & Defence Innovation Summit 2026

An executive summit on AI trust, autonomous defence systems, and quantum-era cybersecurity. Hosted by the Cyber Security Global Alliance during Toronto Tech Week. Senior executives, policymakers, and defence innovators.

AI Trust Defence Innovation
Toronto May 28, 2026

ALL IN Talks Toronto

Presented by SCALE AI and the Vector Institute. Ontario’s AI ecosystem convening for commercialization, infrastructure, and enterprise adoption. A focused gathering of 650+ AI and technology leaders.

Canadian AI Enterprise Adoption
Montréal Sept 16–17, 2026

ALL IN 2026

Canada’s largest AI and technology event. Run by SCALE AI, gathering 7,500+ business leaders from 40 countries to shape the future of Canadian and global AI.

Global AI Innovation Cluster
Our Story

Twenty years of building, scaling, and exiting.
Now building one more.

Rooca was born from a simple observation made across two decades of enterprise infrastructure: the most expensive moments in modern enterprise are not the outages themselves, but the hours of human reasoning required to understand why they happened.

Our co-founders bring more than twenty combined years across enterprise infrastructure, distributed systems, and applied AI, including prior startup leadership roles and successful founder exits. They have lived every phase of the reliability problem: 3 AM on-call rotations, post-incident review boards, and regulator briefings the morning after. They have watched senior reliability engineers, the most expensive technical talent in the enterprise, spend their nights chasing root causes that should have been found in minutes.

When generative AI matured, the obvious response was to point a single large model at the problem. That approach produced answers, but not defensible ones. Regulated enterprises cannot run mission-critical infrastructure on a system that gives one opinion and cannot show its reasoning. Auditors, CISOs, and compliance officers need to see how a conclusion was reached, why competing explanations were rejected, and what confidence the system has in its own verdict. The Tribunal Dialectic Engine was built to answer that demand: three specialized agents (a Prosecutor, a Defender, and a Judge) whose adversarial debate is arbitrated by a deterministic scoring layer no language model can override. The result is a verdict that is reproducible, auditable, and confidence-scored. The foundation for safe autonomy in regulated environments.

Along the way, we also learned that the most expensive root causes do not live at the application layer. They live below the API line: in firmware revisions, fabric anomalies, and silent hardware degradation that app-layer reasoning cannot reach. Rooca was architected from the start to see across both, treating application telemetry and substrate signals as peer evidence nodes in a unified evidence graph.

We built Rooca in Canada deliberately. The Canadian AI ecosystem, anchored by Creative Destruction Lab, Vector Institute, and MaRS Discovery District, with applied research communities spanning Toronto, Montreal, and Edmonton, is one of the world’s strongest concentrations of responsible AI thinking and reinforcement learning expertise. Canadian regulatory alignment with European frameworks (DORA, NIS2, EU AI Act, OSFI E-23) makes it the natural headquarters for an enterprise AI infrastructure company built around governance and auditability. Rooting Rooca here is a strategic decision, not a default one.

Today Rooca is in production with a European energy infrastructure design partner. Mean time to resolution has fallen from roughly four hours to eleven minutes. The category we are building, Autonomous Causal Intelligence, sits above monitoring, observability, and alerting. It is the layer where reactive debugging ends and deterministic autonomy begins.

The team that built the foundations of three previous companies is now building one more. This time, the goal is category leadership.
Careers

Build the reasoning layer for autonomous infrastructure.

We are hiring engineers who want to define a new category. Rooca is not another chatbot company. We are building the AI decision engine that regulated enterprises will trust.

See Open Positions

Explore Rooca on your terms.

Rooca deploys inside your VPC. Your data stays yours. The demo uses synthetic infrastructure to show you exactly how the Tribunal investigates, debates, and delivers a confidence-scored verdict.

Reply within one business day · Available to enterprise teams in any industry where downtime matters — financial services, healthcare, energy, telecoms, manufacturing, e-commerce, and critical infrastructure.