01Asset discovery and routing
Internet-facing asset discovery, multi-asset routing, ownership and lifecycle context, continuous monitoring.
Current Project — OrdoAI
An AI-native External Security Posture Management platform
OrdoAI discovers Internet-facing assets, assesses external exposure, preserves historical evidence, monitors meaningful changes, enriches suspicious indicators, and explains remediation in plain language for small and mid-sized organizations.
Development state
Status
Under Active Development
Deterministic systems establish security facts. AI explains those facts.
Capabilities present today
What OrdoAI Already Does
Capabilities implemented and validated in the current build.
02DNS and domain posture
DNS, MX, SPF, DKIM, DMARC, and certificate-transparency context.
03TLS and certificate security
Certificate validity and chain checks, protocol and cipher analysis.
04Web and browser security
HTTP behavior, security headers, browser and client-side checks, reachability classification, untrusted-transport evidence.
05Technology intelligence
Detected web and server technologies with scan-level attribution and vulnerability correlation support.
06Findings and reconciliation
Evidence-backed findings, reconciliation, confidence and coverage handling, duplicate prevention.
07Reporting
Executive and technical reports with lifecycle-aware scope and Markdown, PDF, and JSON outputs.
08Intelligence/change foundation
Change significance, event correlation, notification eligibility, AI explanations, and continuous monitoring foundations.
AI agents have not yet been introduced. Agentic workflows remain future research.
Earlier research
Project Evolution
Before the current OrdoAI ESPM direction, earlier SecureLog / AI SOC experimentation explored the ideas below. This is earlier R&D that informed the current product — it is not the current flagship architecture.
- Wazuh and OpenSearch event ingestion experiments.
- AI-assisted interpretation of security events.
- Security analyst workflow prototyping.
- Natural-language investigation of stored event data.
Continue
Engineering detail and what comes next.