A security portfolio, built and entering early access

A bug bounty and VDP platform and social network: companies publish programmes, hunters hunt and get paid, with AI triage.

A public cybersecurity chat: it answers questions, guides first steps and connects the person to the right service or module, backed by the team.

An external security grade for a domain (A–F), non-intrusive: it assesses exposure, email, TLS and headers. Top of funnel, no sign-up.

Passive surface scanning on authorised domains, with a browser extension for quick checks. No intrusive traffic by default.

It consolidates scan findings, deduplicates and prioritises by real risk with AI — separating the noise from what needs fixing now.

It researches everything public about a company, person or asset and delivers a structured dossier, with sources and an evidence trail.

Digital-exposure monitoring: it watches forums, the dark web, Telegram and paste sites for leaks and brand mentions. It only observes; it never buys illicit data.

It ingests CVEs, CERT advisories and IOCs, correlates them with your technology profile and summarises with AI. Coverage with configurable regional focus.

A triage engine that classifies and enriches security alerts (L1/L2) with AI, handing the analyst only what genuinely needs a human decision.

Managed detection and response sized for SMBs: event ingestion, detection rules and response with AI triage up front.

Simulated phishing campaigns with AI-generated emails, tailored by role and context, with a report of who clicked and microlearning.

AI-assisted code security review: it flags issues by CWE/OWASP, ranks severity and suggests the fix. Sending code to the model is opt-in per repository (fail-closed).

Compliance automation (ISO 27001, SOC 2, PCI, LGPD): it generates policies, collects evidence and tracks maturity in a single score.

LGPD compliance tailored to residential buildings: data mapping, policies, notices and a compliance trail for managers and administrators.

A compliance cockpit for Brazil's ANS RN 964 rule for health operators: controls, evidence and tracking of regulatory adherence.

Discovery and monitoring of a building's IoT/CCTV devices — cameras, DVR/NVR, access control: it detects default credentials, vulnerable firmware and internet exposure.

OT/ICS visibility and detection for the long tail (cooperatives, small hydro plants, substations): asset inventory, passive parsing of Modbus/DNP3/IEC 61850 and anomaly alerts, without interfering with the process.

An OT/ICS simulation environment to exercise attack and defence in industrial scenarios — without touching the real production environment.

An arena of hands-on security challenges and labs — real scenarios to exercise and measure technical skill, tied to the Academy.

A showcase connecting cybersecurity professionals to real demand, with profiles validated by the Academy track and the Arena.

A cybersecurity newsroom that reports, edits and publishes to a blog — the platform's content and distribution layer.

Active dark-web investigation beyond ShadowSignal's passive monitoring — assisted collection and deeper correlation. Planned.

Authorised active scanning (Nuclei/nmap/ZAP) beyond JustCyber Scan's passive surface, with an execution worker. On the roadmap.

Pentest as a service with AI agents orchestrating recon and exploitation under human supervision. On the roadmap.

Variants of the managed SOC — co-managed and fusion-center models for larger operations, beyond today's SOC for SMB. On the roadmap.