Skip to content

Evidence-based. Authorisation-bound. No guaranteed removal, no fabricated urgency.

About

One capability, one product, one operator — deliberately separated

Identity & Asset Guardian is the customer-facing product. The detection capability behind it and the company that sells and delivers it are distinct, and keeping them distinct is a design decision rather than an organisational accident.

Structure

Why the separation matters to you

A protection product that also decides its own authorisation boundaries has no real boundaries. Separating the observation capability from the governance layer, and both from the commercial operator, means that the part of the system that wants to find more cannot quietly grant itself permission to look further. You inherit that constraint as a customer: the scope you authorise is the scope that runs.

  1. 01Build and integration foundationThe engineering substrate the capability is assembled on.
  2. 02Orchestration and reasoningCollection, correlation, investigation and reasoning across public sources.
  3. 03Visual and multimodal observationImage, logo and visual similarity analysis.
  4. 04Authorisation and governancePolicy, refusal and revocation. Holds the customer's authorisation scope and can refuse the rest of the system.
  5. 05Identity & Asset GuardianThe customer-facing product: offers, reports, workspace and delivery.
  6. 06NanoCorpThe operator: acquisition, sales, payment, onboarding, delivery and customer relationship.

Principles

What we optimise for

These are the trade-offs we have actually made, including the ones that cost us conversions.

  • A usable finding beats a dramatic one

    We would rather deliver three findings someone will act on than forty that produce a feeling of alarm and no filed report.

  • Uncertainty is stated, not smoothed

    Hypotheses that could not be established stay in the report. Removing them would make the report look cleaner and be worth less.

  • Scope is a promise

    What was not examined is written down. A report that does not say where it did not look cannot tell you what its silence means.

  • No number we cannot define

    We publish no threat counters, no precision rates and no customer claims we cannot substantiate. When we have real figures, they will arrive with their definitions attached.