ResearchCyberIn development
Identity is the new perimeter
For most businesses the first breach is not a hacked server. It is a signed-in account. How Vamocles approaches cyber defence for businesses and the people in them.
Where breaches begin
Ask how a business was breached and the answer is rarely exotic. Someone signed in who should not have: with a reused password, a phished session, an account nobody remembered to close.
Firewalls and antivirus still matter, but the boundary of a modern company is no longer its network. It is the set of identities that can reach its email, files, finances and cloud services. Defend those, and most attacks have nowhere to start.
Our approach
The model. It learns what normal looks like for your organisation (who signs in, from where, on which devices, to what) and flags what breaks the pattern.
Vamocles treats identity, devices, platforms and data as one picture rather than four products. In practice that means four questions, answered continuously:
- Who signed in? From where, on what device, and does that fit the pattern for this person?
- What does the company run on? Devices, domains, cloud accounts and the platforms built on them, mapped as one estate.
- What is already exposed? Company domains and staff credentials checked against leak indexes and breach directories every day.
- What do we do now? Lock Down: one deliberate switch that pauses new sign-ins, narrows remote access to known devices and alerts the security team.
Where AI helps, and where it should not decide
AI is good at the part people find exhausting: reading every sign-in, noticing that a password reset was followed four minutes later by a sign-in from a new country, and saying so in a sentence. Vamo, our analyst, does exactly that, and recommends a response.
The system can be confident. The decision stays human.
It is also the right tool against AI-made attacks: phishing written to sound like a colleague, cloned voices, look-alike domains. Recognising those at scale needs a model on your side.
The people behind the business
Attackers do not separate a company from its staff, so neither do we. The engineer's personal email, the executive's home address on a data-broker site and the finance lead's leaked password are company risks. The personal layer, already in preview on iPhone and Mac, covers those people directly: Vanish, Monitor, file checks and Lock Down.
Where this stands
Businesses can join early access through a briefing. Read more on the Cyber page.
Published by Vamocles ·
Request a briefing
