{ "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://securitybox.io/#organization", "name": "CyberHunter Solutions", "url": "https://securitybox.io", "logo": { "@type": "ImageObject", "url": "https://securitybox.io/img/securitybox-og-new.jpg" }, "foundingDate": "2016", "description": "CyberHunter Solutions builds and operates SecurityBox, an AI-native network detection and response platform. The team has served 500+ global clients across penetration testing, security audits, threat hunting, incident response, and NDR, holding certifications including CISSP, OSCP, OSWP, GPEN, GWAPT, GCIA, and CEH.", "knowsAbout": [ "Network Detection and Response", "Penetration Testing", "Threat Hunting", "Cloud Security Assessment", "Identity and Access Risk", "Security Operations" ], "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "url": "https://securitybox.io/contact/" } }, { "@type": "WebSite", "@id": "https://securitybox.io/#website", "name": "SecurityBox | AI-Native Analyst", "url": "https://securitybox.io/", "publisher": { "@id": "https://securitybox.io/#organization" }, "inLanguage": "en" }, { "@type": ["SoftwareApplication", "Product"], "@id": "https://securitybox.io/#securitybox", "name": "SecurityBox", "alternateName": "SecurityBox — AI-Native Analyst", "applicationCategory": "SecurityApplication", "applicationSubCategory": "Network Detection and Response (NDR)", "operatingSystem": "Physical or virtual edge appliance (Linux)", "brand": { "@id": "https://securitybox.io/#organization" }, "provider": { "@id": "https://securitybox.io/#organization" }, "url": "https://securitybox.io/", "image": "https://securitybox.io/img/securitybox-og-new.jpg", "slogan": "Conversations with conclusions, not alerts.", "description": "SecurityBox is an AI-native network detection and response (NDR) platform delivered as a single edge device, physical or virtual. From one seat on the LAN it watches internal traffic (passive NDR), continuously tests the external perimeter, and assesses cloud and identity — then reasons over a deep multi-stage pipeline (observe, score, judge, conclude) to deliver evidence-backed conclusions with recommended actions, in plain English. Unlike a SIEM or dashboard that produces alerts, SecurityBox produces conclusions you can hold a conversation with.", "disambiguatingDescription": "An AI-native security analyst and NDR platform. Not a SIEM, not a dashboard, and not a chatbot you talk to — it curates conclusions and follows a Bring Your Own AI (BYOA) model: conclusions are streamed to the customer's own AI over a live connection, and the customer's AI reaches back through the SecurityBox API for more when a conclusion raises a question, so reasoning stays inside the customer's walls. It concludes rather than alerts, and consolidates four security jobs — autonomous NDR, continuous penetration testing, SOC augmentation, and continuous identity and authentication risk — into one continuously updated security posture from a single edge device.", "keywords": "NDR, network detection and response, AI-native security, AI security analyst, autonomous NDR, continuous penetration testing, SOC augmentation, identity risk, authentication risk, behavioral anomaly detection, security posture, conclusions not alerts, managed security, SMB security", "audience": { "@type": "BusinessAudience", "name": "Small and mid-sized businesses, healthcare, financial services, and managed service providers that need security answers without a large in-house SOC" }, "featureList": [ "Passive network detection and response (east-west and north-south traffic via SPAN)", "Continuous external penetration testing and vulnerability assessment", "Credentialed cloud and identity assessment (Microsoft 365, Azure, AWS, Active Directory)", "Evidence-backed conclusions with recommended actions instead of raw alerts", "BYOA (Bring Your Own AI): conclusions streamed to the customer's own AI over a live connection, with an API to pull additional data on demand", "Deep reasoning pipeline: observe, score, judge, conclude with enrichment, correlation, ML and anomaly detection", "Sovereign, regulated, and air-gapped friendly — reasoning stays in the customer's own AI, inside their walls", "One continuously updated security posture score", "Fully managed or co-managed operation" ], "offers": { "@type": "AggregateOffer", "priceCurrency": "USD", "lowPrice": "500", "priceSpecification": [ { "@type": "UnitPriceSpecification", "name": "Platform base", "price": "500", "priceCurrency": "USD", "unitText": "month" }, { "@type": "UnitPriceSpecification", "name": "Host Risk Assessment", "price": "3", "priceCurrency": "USD", "unitText": "host/month" }, { "@type": "UnitPriceSpecification", "name": "Identity Risk Monitoring", "price": "1", "priceCurrency": "USD", "unitText": "identity/month" } ], "url": "https://securitybox.io/pricing/", "description": "Transparent per-unit pricing with no feature gates. Month-to-month with a 30-day guarantee: no findings, no charge." }, "hasOfferCatalog": { "@type": "OfferCatalog", "name": "SecurityBox — Four jobs, one living posture", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@id": "https://securitybox.io/#service-ndr" } }, { "@type": "Offer", "itemOffered": { "@id": "https://securitybox.io/#service-pentest" } }, { "@type": "Offer", "itemOffered": { "@id": "https://securitybox.io/#service-soc" } }, { "@type": "Offer", "itemOffered": { "@id": "https://securitybox.io/#service-identity" } } ] } }, { "@type": "Service", "@id": "https://securitybox.io/#service-ndr", "name": "Autonomous NDR", "serviceType": "Network Detection and Response", "provider": { "@id": "https://securitybox.io/#organization" }, "description": "Detection and response that triages itself. SecurityBox passively watches east-west and north-south network traffic from a SPAN feed, scores anomalies, judges them through its reasoning pipeline, and draws a conclusion — around the clock, without a human doing Tier-1 triage by hand. Solves the problem of alert overload and the analyst bottleneck by delivering conclusions instead of raw alerts.", "isRelatedTo": { "@id": "https://securitybox.io/#securitybox" } }, { "@type": "Service", "@id": "https://securitybox.io/#service-pentest", "name": "Continuous Penetration Testing", "serviceType": "Continuous Penetration Testing and Vulnerability Assessment", "provider": { "@id": "https://securitybox.io/#organization" }, "description": "Penetration testing that never stops. Instead of a point-in-time annual report that is stale within weeks, SecurityBox actively tests the external perimeter, internal network, and cloud every day — a live view of what an attacker can actually reach today, delivered as conclusions with remediation steps. Solves the problem of security assessments that age out between engagements.", "isRelatedTo": { "@id": "https://securitybox.io/#securitybox" } }, { "@type": "Service", "@id": "https://securitybox.io/#service-soc", "name": "SOC Augmentation", "serviceType": "Security Operations Augmentation", "provider": { "@id": "https://securitybox.io/#organization" }, "description": "Don't rip and replace — supercharge. SecurityBox sits alongside an existing EDR and SIEM and wraps every alert in network corroboration, so the team instantly knows which alerts are real and which are noise. Solves the problem of tool sprawl and analyst fatigue by turning existing alert streams into a short, prioritized list worth a human's time.", "isRelatedTo": { "@id": "https://securitybox.io/#securitybox" } }, { "@type": "Service", "@id": "https://securitybox.io/#service-identity", "name": "Continuous Identity and Authentication Risk", "serviceType": "Identity and Access Risk Assessment", "provider": { "@id": "https://securitybox.io/#organization" }, "description": "Identity risk, measured continuously. SecurityBox watches how accounts actually behave across Active Directory, Kerberos, LDAP, and cloud identity providers, turning it into a live identity risk score rather than a once-a-year audit. Solves the problem of identity and authentication exposure going unmeasured between periodic reviews.", "isRelatedTo": { "@id": "https://securitybox.io/#securitybox" } }, { "@type": "FAQPage", "@id": "https://securitybox.io/#faq", "about": { "@id": "https://securitybox.io/#securitybox" }, "mainEntity": [ { "@type": "Question", "name": "What is SecurityBox?", "acceptedAnswer": { "@type": "Answer", "text": "SecurityBox is an AI-native network detection and response (NDR) platform delivered as a single edge device. It watches your network, continuously tests your defenses, and assesses your cloud and identity, then delivers evidence-backed conclusions with recommended actions in plain English — conversations with conclusions, not alerts." } }, { "@type": "Question", "name": "Is SecurityBox a SIEM?", "acceptedAnswer": { "@type": "Answer", "text": "No. A SIEM processes events and produces alerts, leaving analysts to interpret them. SecurityBox is an AI-native analyst and NDR platform that reasons to a conclusion — what happened, the evidence, and what to do — and can be questioned in plain English. It complements an existing SIEM rather than replacing your team's judgment." } }, { "@type": "Question", "name": "What problems does SecurityBox solve?", "acceptedAnswer": { "@type": "Answer", "text": "It solves alert overload and the analyst bottleneck (autonomous NDR that concludes instead of alerting), security assessments that go stale between engagements (continuous penetration testing), tool sprawl and analyst fatigue (SOC augmentation that corroborates existing alerts), and unmeasured identity exposure between periodic audits (continuous identity and authentication risk)." } }, { "@type": "Question", "name": "What are the four jobs SecurityBox does?", "acceptedAnswer": { "@type": "Answer", "text": "Autonomous NDR (detection and response that triages itself), continuous penetration testing (a live view of what an attacker can reach today), SOC augmentation (network corroboration for your existing EDR and SIEM alerts), and continuous identity and authentication risk (a live identity risk score). All four converge into one continuously updated security posture from a single edge device." } }, { "@type": "Question", "name": "What is BYOA (Bring Your Own AI), and do I talk to SecurityBox's chatbot?", "acceptedAnswer": { "@type": "Answer", "text": "You do not talk to a SecurityBox chatbot. SecurityBox curates the conclusions and streams them to your own AI over a live connection. The conversation happens in your AI: ask it to explain a conclusion in plainer terms, or ask it to go deeper and it reaches back through the SecurityBox API to pull additional data. That is BYOA — Bring Your Own AI — which keeps your data and reasoning inside your own walls, ideal for sovereign, regulated, or air-gapped environments." } }, { "@type": "Question", "name": "How is SecurityBox different from an annual penetration test?", "acceptedAnswer": { "@type": "Answer", "text": "An annual pentest is a point-in-time snapshot that ages within weeks. SecurityBox tests continuously — external, internal, and cloud — so you always have a current view of what an attacker can reach, delivered as conclusions with remediation rather than a static report." } } ] } ] }