Roadmap
What is available, and what is coming
We build one product at a time and show where each one stands. No dates until we can keep them; the order below is the order we work in.
Roadmap phases
Phase 1
Today
Live today: services our team delivers and free tools anyone can use.
Available now- Free tool
Guardian
Free scam check for links and messages.
- Free tool
Domain security check
Free email and web security grade.
- Free tool
Lookalike domain finder
Free brand impersonation check.
- Service
AI red teaming and LLM testing
Chatbots, RAG systems and agents.
- Service
AI governance and deepfake readiness
Policy, discovery and drills.
- Service
Penetration testing
Web, mobile, API, network and cloud.
- Service
Incident response and forensics
Containment, evidence and recovery.
- Service
vCISO, compliance and training
Leadership, standards and awareness.
- Free tool
Phase 2
Next
Being built on the new Kytheos platform now.
In development- Free tool
Guardian file checks
Suspicious files, checked in a sandbox.
- Platform
Kytheos console
Accounts, ownership verification and plans.
- Product
Code, Cloud and Intelligence
First paid platform products.
- Product
Sentinel
Platform behind managed detection.
- Free tool
Phase 3
Later
Scoped, and scheduled after the platform core.
Planned- Free tool
AI prompt safety check
Free system prompt hardening.
- Platform
Kytheos MCP server
Connect your AI assistants and tools to Kytheos.
- Platform
Public API
Kytheos checks inside your own systems.
- Product
Shield, Vault and Forensics
Endpoint, identity and investigation.
- Product
Academy and Labs
Learning and published research.
- Free tool
Planned
Kytheos inside the AI tools you already use
We plan a Kytheos MCP server, so AI assistants and agents your team uses can ask Kytheos to check a link, a domain or a finding, with your permission and inside your plan. It comes after the platform core, and it will be built and tested to the same standard we test our clients' AI systems against.
Example request from an AI assistant
tool kytheos.check_domain
input { "domain": "yourbrand.example" }
Result
verdict: needs attention, confidence: high
evidence: DMARC policy is none
Illustration of a planned feature
Talk to a senior security practitioner
Tell us what you need to protect. You get a clear view of what we can do, what it involves, and what it would cost.
Under attack right now?
Ransomware, account takeover or fraud in progress. Email us with URGENT in the subject and it is read before anything else.
Get incident response