SOVEREIGN BY DESIGN
AI Matrix
Platform
Solutions
Switch to OS
Resources
Partner
Company
The Open Systems defense lines

Two defense lines.
One smart defense.

Attackers have to beat both lines. We only need one line to stop the entire attack.

Inline inspection · LiveJanus · LiveArgus · Rolling outApate · Rolling out
At the edge. Inside.

Two lines, one defense.

Next line, in the making: we are already building the next line. One that acts even earlier, while an attack is still being built.

Why one line is not enough

AI attacks in layers.

Most attacks today go unseen, and those fragments set up the next move. AI attacks in layers: it peels the onion, then hits the target. What once needed expertise now takes a script and a few cents of compute, at machine speed.

Static defenses leave two gaps. At the edge, every service judges alone: one slice of one attacker, one company at a time. Past the edge, whatever gets through, a stolen credential, an exploit, an insider, looks like normal traffic.

So the defense has to see more than one company, and stop being blind inside. That is what the two lines are for.

Block the known

What is known dies at the edge, for you and for every other customer.

Expose the rest

Any touch of a decoy is a real signal, not noise.

Side by side

The edge stops the known.
The inside catches the rest.

Line 1 · At the edge
Line 2 · Inside
Where
At the edge: every session, file and connection, inline
Inside your network: decoys among your real systems
Stops
What is known, to you or to any other customer
The intruder who got through anyway
Signal
Weak signals from all customers, correlated into one verdict
Any touch of a decoy is a real signal, not noise
Response
Blocks automatically or waits for human release
Argus blocks the attacker at every customer’s edge, at the level you choose
Agents
Janus (Live) · Argus (Rolling out)
Apate (Rolling out)
Walk through an attack

Where each line catches it.

  1. 01 · Outside

    The phish arrives

    AI writes it with no spelling mistakes, no reused template and no previously identified malicious attachment. Line 1 checks the link, the file and the sender inline, and Janus tells you whether the catch mattered.

  2. 02 · The edge

    Weak alone, loud together

    The same attacker leaves faint traces elsewhere: a rejected SSH login at one company, a failed sign-in at another. Argus correlates them into one verdict and blocks the attacker at your edge too. Patterns only, never customer data.

  3. 03 · Inside

    The intruder explores

    Whoever gets past the edge starts mapping your network. Among your real systems sit decoys that only an intruder would touch. Plain scans are ignored; real interaction is the signal.

  4. 04 · Engaged

    Milliseconds become minutes

    An AI answers like the real system and keeps the story consistent, command after command. Attackers waste their time on ghosts while Apate learns what they came for.

  5. 05 · Cut off

    Blocked, everywhere

    Apate’s finding goes straight to Argus, and the attacker is blocked at every customer’s edge, at the level you choose.

One system, not two products

The lines talk to each other.

  • Inside feeds the edge: when Apate exposes an attacker, Argus blocks them at every customer’s edge.
  • One customer feeds all: when Argus learns a pattern at one customer, every customer’s protection learns it too.
  • One conversation: findings from Argus and Apate can feed back through Lucy, so you ask in one place.
  • Your call: Argus acts on its own or only advises. Blocks expire automatically and can be undone.
  • Humans in the loop: Level-3 engineers set the boundaries and own every critical call, around the clock.

Meet Lucy and the AI Matrix

Straight answers on status

What is live, what is rolling out.

Argus and Apate are separate offerings that you choose to enable. Both are rolling out from October.

Straight answers

Questions, answered.

Do the decoys get in my users’ way?

No. Your users never touch them, and Apate needs no appliances and no endpoint agents.

Does Collective Defense share my data with other customers?

No. Argus shares threat patterns, never customer data, and cross-customer learning only happens where compliance allows.

What does the first version of Apate cover?

Apate starts with text-based application-layer protocols, such as HTTP and APIs, and interactive SSH, Telnet and FTP. Binary protocols fall back to static templates.

Will scanners or routine probing set off the decoys?

No. Plain scans get a normal response and are ignored. Only real interaction with a decoy, such as opening a shell or filling in a form, becomes a signal.

What if a block hits the wrong address?

Blocks expire automatically and can be undone. And you decide whether Argus blocks on its own or only gives you its verdict.

Do I need both lines?

They are built to work together, and you choose. The inline inspection is part of the platform; Argus and Apate are separate offerings that you enable. Compare the operating models

See what the two lines would have caught.

Thirty minutes with a Level-3 engineer. Not a sales call.

Book the session →
Already a customerEverything you use today keeps running.