Since 2023
We have been using AI in offensive and defensive cyber security work since 2023 — not as a marketing layer, as a tool in engagements. That means models and pipelines that read code, logs, telemetry and threat data, then produce output a senior consultant will stand behind.
Offensive
AI-assisted code review and vulnerability research; faster triage of large codebases and firmware; assistance with recon, variant analysis and exploit development where the engagement calls for it. The model does not replace the consultant. It makes a good one cover more ground.
Defensive
Detection engineering, log and SIEM analysis, alert triage, and custom classifiers trained on your own estate. Useful when the volume of telemetry has already beaten the team, and you need something that runs on your data rather than a generic cloud SOC.
In-house, self-hosted, or cloud
We design and deliver custom solutions that run where you need them: fully in-house on your hardware, self-hosted in your private cloud or an air-gapped network, or in a commercial cloud if that is the right trade-off. Source, models and prompts can stay on your side of the NDA. We do not require you to send sensitive data to a third-party AI vendor.
What this is not
We will not sell you a chatbot wrapper and call it a platform. If a smaller script, a detection rule or a human review is the right answer, that is what you will get.