Cloud & Server Defense01
AI-CyberDrome
One platform. One console. One report.
- 3clouds: AWS, Azure, Google Cloud
- 99.6%precision floor (95% lower bound) before any rule goes live
Portfolio overview
AI-native security products
AI-native security products across seven solution areas. One security partner. Built and supported by Enyxum Lanka.
- Self-hosted
- On-prem
- Explainable
- Audit-ready
- 7Solution areas
- 3Clouds: AWS, Azure, GCP
- 1,881YARA rules (AI-MFA, AI-Cerberus)
The portfolio
One portfolio. 7 solution areas. One partner.
Real, running consoles, not mock-ups. Filter by solution area or open any product for its modules, deployment and measured results.
Cloud & Server Defense02
AI-ClusterGuard
One control plane. Every server. Every signal.
- 48.5symptoms per incident (22,261 raw signals collapsed)
- 8guardrail rungs evaluated in fixed order
Security Operations03
AI-SOCCentral
From ten thousand alerts to one finished case file.
- 4reputation sources
- 7kill-chain stages
Threat & Exposure Intelligence04
MailGuard.AI
Score any address. Audit any sending domain.
- 27analysis pages in one console
- 679MITRE ATT&CK techniques shipped (local bundle)
Threat & Exposure Intelligence05
AI-DomainRadarX
Find everything you own. Report only what you can prove.
- 11passive discovery sources, all free and keyless
- 21advanced checks in five tiers
Application & Supply-Chain Security06
AI-APISEC
Proof-carrying API security testing.
- 12security scanners across the OWASP API Top 10
- 5detection oracles confirm every finding
Application & Supply-Chain Security07
AI-EAGLE
Find every leaked secret. Prove which are live.
- 880+credential detectors (889 registered)
- 16scan sources
Application & Supply-Chain Security08
AI-OSX
One scanner. One console. One risk register.
- 241/241CLI features available in the GUI
- 15report formats
Offensive Security09
AI-ZeroX
Continuous proof of what is actually exploitable.
- 823MITRE ATT&CK techniques mapped in-platform
- 100%tenant isolation verified
Investigation & Forensics10
AI-CyberForensix
Investigate the attack path. Prove what happened.
- 3cloud providers: AWS, Azure, Google Cloud
- 11investigation steps
Investigation & Forensics11
AI-MFA
Read the crime scene while it still exists.
- 1,881YARA rules across 100 rule files
- 15analysis tabs in one console
Investigation & Forensics12
AI-Cerberus
Three detection heads. One explainable verdict.
- 1,881YARA rules (100 rule files, 13 categories)
- 78static ML features per file
Platform & Business Services13
License Central
Issue. Activate. Protect. Prove - from one console.
- 4096bit RSA keypair per product
- 30day grace period after cancellation
Platform & Business Services14
AI-SkillRadarX
Where potential finds direction.
- ~14 minto a full profile (five chapters)
- 5short assessment chapters
The portfolio at a glance
Seven solution areas, one lifecycle
| Solution area | What it does | Products | Count |
|---|---|---|---|
| Cloud & Server Defense | Stop attacks on cloud workloads and servers automatically, with guardrails and proof. | AI-CyberDromeAI-ClusterGuard | 2 |
| Security Operations | Turn SIEM alert floods into scored attackers, cases and reports. | AI-SOCCentral | 1 |
| Threat & Exposure Intelligence | Know what you expose on the internet and in email before attackers do. | MailGuard.AIAI-DomainRadarX | 2 |
| Application & Supply-Chain Security | Find proven vulnerabilities and live secrets in APIs, code, images and pipelines. | AI-APISECAI-EAGLEAI-OSX | 3 |
| Offensive Security | Continuously prove what is actually exploitable, like an always-on red team. | AI-ZeroX | 1 |
| Investigation & Forensics | Answer what happened, with evidence that holds up: cloud, memory and malware. | AI-CyberForensixAI-MFAAI-Cerberus | 3 |
| Platform & Business Services | License, activate and protect software, and guide decisions with explainable AI. | License CentralAI-SkillRadarX | 2 |
Six principles across every product
Built the same way, every time.
- 01/
Proof, not probability
Findings are confirmed before they reach you: oracles, live verification, model consensus and precision floors.
- 02/
Explainable AI
Machine learning ranks and corroborates. It never hides a confirmed critical finding, and every score shows why.
- 03/
Evidence built in
Hashes, chain of custody and audit trails are produced as the work happens, not assembled later.
- 04/
Least privilege by design
Read-only connectors, encrypted secrets and scoped keys. Products change nothing they do not need to.
- 05/
Your data stays yours
Self-hosted or on-premise deployment. Optional enrichment is documented and can be switched off.
- 06/
Measured, not claimed
Metrics are shown with their method and bounds. Illustrative numbers are labelled and replaced with yours in a pilot.
Measured, not claimed
The portfolio by the numbers
Precision floor
AI-CyberDrome: 95% lower bound reached before any WAF rule goes live.
Credential detectors
AI-EAGLE finds leaked secrets and proves which are live with each provider’s API.
ATT&CK techniques
AI-ZeroX maps continuous, provable exposure to MITRE ATT&CK in-platform.
Who it is for
Built for everyone who owns security risk.
CISO
One honest risk picture and board-ready reports.
Start with
Head of SOC
Fewer alerts, more decisions, evidence attached.
Start with
AppSec & DevOps
Proven findings and pipeline gates, not noise.
Start with
Incident response
Answers in minutes, evidence that holds.
Start with
Compliance & audit
Evidence always current, mapped to frameworks.
Start with
MSSP & partners
Many customers from one console, true tenancy.
Start with
How they fit together
One lifecycle. Every stage covered.
- 01
- 02
- 03
- 04
- 05
- +
Platform services
Licensing and explainable AI underneath the portfolio.
Enterprise-grade by construction
Secure products for security teams.
Tenant isolation
Dedicated databases or row-level isolation per tenant in the multi-tenant platforms; built for MSSPs.
Role-based access
Five-role models enforced on every page and API, with separation of request and approval.
Identity
TOTP two-factor, Google and Microsoft single sign-on, brute-force lockout and step-up checks.
Secrets
AES-256-GCM or Fernet encrypted stores; cloud keys never appear in config files or logs.
Audit trail
Append-only or hash-chained logs of every admin, rule and response action.
Least-privilege connectors
Read-only cloud, SIEM and registry roles; outbound-only agents and sensors.
Deploy it your way
Self-hosted platforms and analyst workstations.
| Product | Form factor | Connects to | Multi-tenant |
|---|---|---|---|
| AI-CyberDrome | Web platform, Docker or Kubernetes; agentless to clouds | AWS WAF, Azure WAF, Cloud Armor, Wazuh | Yes |
| AI-ClusterGuard | Web control plane + signed Windows/Linux agents | Host agents, Suricata/Snort, ServiceNow, Jira | Yes |
| AI-SOCCentral | Windows desktop app; read-only to Wazuh | Wazuh indexer + API, reputation APIs, M365/Gmail | Single tenant |
| MailGuard.AI | Windows desktop app; on-premise engine + MySQL | MySQL, breach & reputation APIs, CT logs | Single tenant |
| AI-DomainRadarX | Windows desktop app; local only, no accounts | Public discovery sources, Chrome, SIEM files | Single tenant |
| AI-APISEC | Web console + CLI; Docker or local Python | Target APIs, OpenAPI/GraphQL, CI/CD | Single tenant |
| AI-EAGLE | Docker stack + dockerized CI/CD scanning agent | GitHub/GitLab, S3/GCS, registries, CI/CD | Yes |
| AI-OSX | Six-service Docker stack + signed CI/CD agent | ECR, ACR, Artifact Registry, CI/CD, Jira | Yes |
| AI-ZeroX | Web platform (Docker) + outbound-only sensors | MySQL, Redis, NVD, network sensors | Yes |
| AI-CyberForensix | Web application in a Docker container | AWS, Azure, GCP (read-only) | Single tenant |
| AI-MFA | Windows desktop forensic workstation | WinPmem, DumpIt, FTK Imager, Volatility 3 | Single tenant |
| AI-Cerberus | Desktop application; Windows and Linux | VirusTotal (hash only), SSH sandbox, YARA | Single tenant |
| License Central | Web application; PHP 8.4 + MySQL | Your software, PayPal, SSO, SMTP | Yes |
| AI-SkillRadarX | Web portals + Android app; Docker stack | SSO, payments, local AI, avatar video | Yes |
From first meeting to measured value
A low-risk path to proof.
- 01
Overview
This portfolio and your priorities.
- 02
Live demo
Product demo decks, narrated videos and the live consoles.
- 03
Connect
Follow the connection guides: read-only, least-privilege first.
- 04
Pilot
Run on your data; we report the measured result, not a claim.
- 05
Roll out
Production deployment, training with the user guides, and support.
Pricing model
Pay per product.
Tailored after the pilot.
Every product is priced on its own, so you license only what you deploy.
Subscription per product
Each product has its own subscription.
No per-event or per-GB surprises
Platform products are not metered on alerts, events or data volume.
Tenancy at no extra cost
Where a product is multi-tenant, tenancy is included. Built for MSSPs.