Cybersecurity
Continuous, defensive monitoring of the domains and services you own. Findings are triaged, explained in plain language and turned into reports your team can act on.
Explore CybersecurityAdvanced agentic solutions
Specialist AI teams that do the work. Your people approve it.
Akropia builds teams of AI agents for specific enterprise jobs, starting with cybersecurity and contract obligations. Sign up and your first team is working the same day.
LEADWeekly scan of 14 verified domains complete. 3 new findings.
ANALYSTTLS 1.0 still enabled on mail.example.com. Draft fix ready.
OBLIGATIONSNotice deadline for the hosting contract falls on 1 Mar 2027.
YOU2 actions waiting for approval
Illustrative example, not customer data
Solutions
One platform, built for specific jobs
Each Akropia solution is a complete team: a lead agent that plans the work, specialists that carry it out, and a dashboard where your staff review and approve. You configure the team. You don't have to design it.
Contracts & Obligations
Reads your contracts and tracks what they commit you to: renewals, notice periods, payments and deliverables, with reminders before every deadline. Also available on-prem.
Explore Contracts & ObligationsMore solutions
New teams are added to the same platform, so they inherit its approvals, audit trail and deployment options. Tell us which job you want handled next.
Suggest a solutionHow it works
From setup to approved work
Set the scope
Connect the sources the team may use and tell it what it covers: the domains you own, or the folders that hold your contracts.
The team works
The lead agent plans, specialists research and analyse, and every step is recorded in an audit log you can export.
You approve
Anything that leaves the platform, such as an email, a ticket or a change, waits for a person to approve it.
Deployment
Start in our cloud. Keep contracts in yours.
Every solution runs in Akropia Cloud. Contracts & Obligations can also be installed in your own cloud or data center, so your contracts never leave your environment.
Akropia Cloud
SaaS · all solutions
- Start now, working the same day
- Managed updates
- Usage-based model costs
Your cloud
Contracts & Obligations · AWS, Azure or Google Cloud
- Installed in your account
- Your network and identity provider
- Your model endpoint
Your data center
Contracts & Obligations · on-premises, including air-gapped
- Kubernetes or Docker Compose
- Offline installation bundles
- No data leaves your site
Built for control
Agents that can be trusted with real work
- Human approval by defaultNo outbound action happens until a person approves it.
- Complete audit trailEvery agent step, tool call and approval is logged and exportable.
- Your keys, your modelsBring your own model provider and API keys, per account.
- Isolated by accountEach customer's data, files and credentials are kept separate.
Exploited now
Just published
Sources: CISA Known Exploited Vulnerabilities catalog · NIST National Vulnerability Database
Exploited now
Listed in CISA's Known Exploited Vulnerabilities catalog
- CVE-2024-3400Palo Alto PAN-OS GlobalProtect: command injection
- CVE-2024-21762Fortinet FortiOS SSL VPN: out-of-bounds write
- CVE-2023-46805Ivanti Connect Secure: authentication bypass
- CVE-2023-4966Citrix NetScaler ADC and Gateway: session token leak
- CVE-2023-20198Cisco IOS XE web UI: privilege escalation
- CVE-2023-22515Atlassian Confluence: broken access control
- CVE-2023-34362Progress MOVEit Transfer: SQL injection
- CVE-2021-44228Apache Log4j: remote code execution (Log4Shell)
Just published
New critical and high CVEs from the National Vulnerability Database
- CVE-2026-122051Edimax BR-6208AC: command injection · CVSS 10.0 · published Nov 5, 2026
- CVE-2026-120189D-Link DIR-505: TFTP stack buffer overflow · CVSS 10.0 · published Nov 1, 2026
- CVE-2026-120195WAVLINK WL-WN579A3-A: OS command injection · CVSS 10.0 · published Nov 1, 2026
- CVE-2026-120196WAVLINK WN579X3-D: OS command injection · CVSS 9.9 · published Nov 1, 2026
- CVE-2026-120197WAVLINK WL-WN530HG4B: OS command injection · CVSS 9.9 · published Nov 1, 2026
- CVE-2026-120191Presenton API: missing authentication · CVSS 7.3 · published Nov 1, 2026
A guided tour of Akropia Cybersecurity, narrated by the team lead (about 70 seconds). Illustrative data on example.com.
Solution · Cybersecurity
Know what's exposed before someone else does.
Prove you own your domains with a DNS record. Akropia's agentic security team scans them, explains every finding with a fix, and Continuous Protection keeps watching for new threats that hit your stack.
LEAD4 verified domains. Weekly perimeter scan complete.
INTELNew exploited CVE matches nothing in your stack.
FINDINGTLS 1.0 still accepted on mail.example.com. Fix attached.
YOU1 ticket waiting for approval
Illustrative example, not customer data
How it works
Your perimeter, watched safely
Add your assets
List the domains and hosts you want covered.
Prove they're yours
Publish a DNS TXT record or a .well-known file. Nothing is scanned until ownership is verified.
Threat intel
The team matches newly exploited and newly published vulnerabilities against what you run.
Perimeter and app scans
Non-intrusive checks of exposed services, certificates, configuration and web apps.
Findings, fixes and a report
Every finding is explained with a fix, tracked to closure and summarised in an audit-ready report.
Alerts on critical issues
You're told as soon as something critical appears, with what to do about it.
What you get
One team covering your whole perimeter
Threat Intel
New threats, checked against you
Exploited and newly published vulnerabilities, matched to your stack.
Perimeter
Everything you expose
Hosts, open services, certificates and DNS for every verified domain.
App Scans
Web apps, non-intrusively
Configuration, headers and known issues, with detection-only vulnerability checks when you opt in.
Tracked Findings
Nothing gets lost
Each finding carries severity, owner and status until it's fixed.
Alerts
Told when it matters
Critical issues reach you straight away, not in next month's report.
Report
Audit-ready
A report for leadership, customers and auditors showing what was found and fixed.
| Severity | Finding | Asset | Recommended fix | Status |
|---|---|---|---|---|
| High | Certificate expires in 6 days | shop.example.com | Renew and enable automatic renewal | Awaiting approval |
| Medium | TLS 1.0 still accepted | mail.example.com | Disable TLS 1.0 and 1.1 | Ticket drafted |
| Medium | Admin login page reachable from the internet | portal.example.com | Restrict to VPN or allowlist | New |
| Low | Missing security headers | www.example.com | Add HSTS and a content security policy | Fixed |
Sample data on the reserved domain example.com, for illustration only.
Continuous Protection
New threats are published every day. We re-test only when one hits your stack.
Continuous Protection checks every new CVE and every addition to CISA's Known Exploited Vulnerabilities catalog against your assets, and re-tests only what's affected.
Daily
$29 / month
Threat check every 24 hours
Hourly
$99 / month
Threat check every hour
Real-time
$249 / month
Threat check every 15 minutes
Every plan includes a 14-day free trial. Pay yearly and get two months free. Continuous Protection is an add-on to the Cybersecurity team.
Built to be safe
Defensive by design
- Scans only assets you've registered and verified.
- Non-intrusive by default. Detection-only vulnerability scanning is opt-in.
- No exploitation and no flooding, ever.
- Refuses to scan private address ranges and cloud metadata addresses.
Point it at your own domains.
Verify a domain, and the team starts working the same day.
A guided tour of Contracts & Obligations, narrated (about 1 minute). Illustrative data.
Solution · Contracts & Obligations
Never miss a renewal, a deadline, or an auto-renew.
Point the team at a folder of contracts or upload them. It reads every file, extracts the parties, value, term and key dates, and flags renewals within 90 days and discounts about to lapse.
READ42 contracts read end to end
RENEWALS5 renewals within 90 days
DISCOUNTS2 discounts lapse within 30 days
CHECK1 contract set aside to check
Illustrative example, not customer data
How it works
From a folder of contracts to a list of dates
Point it at your contracts
Connect Google Drive or upload files. On-prem, point it at a folder in your environment.
It reads each file end to end
Including scanned documents.
It extracts what matters
Parties, value, dates, renewal and notice windows, and dated terms.
It flags what needs action
Renewals, lapsing discounts, auto-renews, and anything it isn't sure of.
You review on one panel
Every flag sits on one findings panel, with the source behind it.
What you get
Every commitment, with its receipt
Findings panel
The whole picture
Contracts read, renewals, discounts and items to check, at a glance.
Every date
Sorted by urgency
Term ends, notice windows and auto-renews, soonest first.
The receipts
Linked to the clause
Each item links to the line in the contract it came from.
Progress
Nothing silently skipped
Documents processed, items recorded, and items set aside with reasons.
Timestamped
A full record
Every read and finding is logged with its time.
Nothing invented
Uncertain means "to check"
Ambiguous or unreadable contracts are marked to check, never guessed.
| Due | Contract | Obligation | Source clause | Urgency |
|---|---|---|---|---|
| 2027-01-15 | Software licence | Introductory discount ends | §6.4 | Within 30 days |
| 2027-03-01 | Hosting agreement | Last day to give notice of non-renewal | §12.3 | Within 90 days |
| 2027-03-31 | Hosting agreement | Auto-renews for 12 months if no notice given | §12.1 | Within 90 days |
| — | Maintenance contract | Scanned copy unreadable on page 4 | p. 4 | To check |
Sample contracts for illustration only. Dates sync to Google Calendar, or to any calendar through an ICS feed.
Built to be governable
It reads and reports. You decide.
- The team reads and reports only. It never amends, signs, or commits you to anything.
- Every flag carries the source text it came from.
- Anything it can't read confidently is set aside and reported.
- Contracts stay in your account and are never shared outside it. On-prem, they never leave your environment.
On-prem
Keep contracts in your own cloud or data center
Contracts & Obligations can be installed in your AWS, Azure or Google Cloud account, or in your own data center, with your identity provider and your own model endpoint.
Point it at a folder of contracts.
Start in Akropia Cloud today, or plan an on-prem installation.
On-prem · Contracts & Obligations
Keep your contracts in your own cloud or data center.
For enterprises that need contracts, extracted terms and model calls to stay inside their own environment, Contracts & Obligations can be installed and run by your team, with our support. Cybersecurity runs in Akropia Cloud only, because it checks your perimeter from the outside.
CLOUDAWS, Azure or Google Cloud, in your account
ON-PREMYour data center, including air-gapped sites
MODELSYour own endpoint or self-hosted models
Compare
Choose how you run Contracts & Obligations
| Akropia Cloud | Your cloud | Your data center | |
|---|---|---|---|
| Who runs it | Akropia | Your team, with Akropia support | Your team, with Akropia support |
| Where data lives | Akropia's cloud | Your cloud account | Your premises |
| Model provider | Managed by Akropia | Your endpoint or provider | Your endpoint or self-hosted models |
| Installation | Sign up | Kubernetes (Helm) or Docker Compose | Kubernetes, Docker Compose or an offline bundle |
| Sign-in | Email or SSO | Your identity provider (SSO) | Your identity provider (SSO) |
| Updates | Continuous | Versioned releases you schedule | Versioned releases you schedule |
| Pricing | Subscription plus usage | Annual licence per solution | Annual licence per solution |
What you get
Built to pass your security review
- Data stays putIn your cloud or data center, contracts, extracted terms and model calls never leave your environment.
- Your identity providerSingle sign-on with OIDC or SAML, and role-based access for admins and reviewers.
- Human approval and audit logApprovals are on by default; every action is recorded and exportable to your SIEM.
- Signed, versioned releasesSigned container images with a software bill of materials for every release.
- Telemetry off by defaultNothing is sent to Akropia unless you choose to share usage reports.
- Installation supportWe help your team plan the install, size the infrastructure and load your first contracts.
Requirements
What you'll need
- A Kubernetes cluster or a Linux server with Docker
- PostgreSQL, either your own or the bundled container
- Access to a language model: your cloud provider's model service, an approved API, or self-hosted models
- An identity provider for single sign-on
- Exact sizing depends on your contract volume. We'll scope it with you.
Contact
Tell us what you want handled
Ask for a demo of Cybersecurity or Contracts & Obligations, plan an on-prem installation of Contracts & Obligations, or suggest the next solution. We reply from a person, not a bot.
Email us at
hello@akropia.ai