01
Scope
First, we get to know you: we talk and agree on the scope of the deployment.
[Product · Offensive testing]
We test your infrastructure the way a hacker would.
We build AI agents that check everything you have exposed on the internet, the way a real attacker would. Our staff review every step and prepare the final report so you can secure your services.
Guard · for businesses
01 — How it works
02
We set up the environment
We run a pilot exactly as we would every month: we apply the strategies an attacker would use and put your infrastructure to the test. To finish, we produce a trial report to validate with you.
03
We automate the systems
We build the AI-agent environment so it runs the tasks every month, and we agree on the acceptance criteria with you.
04
Report and plan
The monthly report with the findings explained and the remediation plan.
02 — What we don't do
We test, but we alter nothing.
We test your infrastructure the way an attacker would, but with permission, scope and limits. These are the lines we do not cross.
No test without written authorisation. Before the first test, you sign what we test, on which domains and when.
We bring nothing down. No denial of service, no destructive action: we find the doors and confirm they open, without going in to do harm.
We do not deceive your team without agreement. Phishing simulations only if you ask for them, and explained to everyone afterwards.
The findings are yours. We share them with nobody: we store them encrypted and only access them to prepare your report.
We don't promise zero risk. We reduce it every month, checking your infrastructure the way malicious bots do.
03 — The plan
Guard: everything in Radar plus the monthly tests.
Designed for companies that want to secure their infrastructure every month against malicious AI agents.
Guard
- Everything in Radar, for 3 company domains and 5 mailboxes
- Monthly offensive tests on everything you expose: automated and AI-assisted, reviewed by people, with your written authorisation
- Monthly in-depth study of employees' leaked credentials
- A named contact; reply within one working day
- One awareness session a year for the team
- Reports of fake domains, included
- 3 reputation clean-ups a month and the initial setup of each domain, included
“Is this a pentest?”
Yes, it is continuous offensive testing: every month, automated, with specialised AI agents, reviewed by people.
“Can it affect my systems?”
We test like an attacker, but bring nothing down: no denial of service, no destructive action, and we agree the scope and time windows.
“What do you need from me?”
Written authorisation, the list of domains and a contact person. The rest we do from the outside, installing nothing.
We test your infrastructure the way attacking bots do.
Want to talk it through calmly? Any doubts? Request a meeting and we will come to you to explain what we offer. Face to face.