Five services. All run automatically, on a schedule you configure once.
Asset discovery, vulnerability scanning, SSVC prioritization, Watchtower alerts and incident tracking. Eight AI agents run every night on a schedule you set once.
Red and Blue AI agents debate every ambiguous finding before it reaches your team. Verdicts stored and inherited across scans. Attack simulation cycles on live infrastructure.
CISA KEV and EPSS synced daily. Watchtower re-correlates your inventory the same morning new entries appear. EPSS spike detection catches pre-KEV signals.
Phishing campaigns built from your own asset inventory, not generic templates. Click and credential tracking per employee. HIBP breach exposure check. Human risk score feeds posture timeline.
Process monitor, file watcher, network events, log scraper. AI triage scores batches before queuing to Horus. Bounded offline queue. Zero OOM. Single install script.
The live demo has 30 days of posture history, real CVE findings, Red/Blue debate transcripts and phishing campaign results.