Platform overview

Everything Horus does.
Pick your area.

Five services. All run automatically, on a schedule you configure once.

Continuous Defense

Discover. Scan. Prioritize.
Without you in the loop.

Asset discovery, vulnerability scanning, SSVC prioritization, Watchtower alerts and incident tracking.

Asset DiscoveryNuclei ScanningSSVC PriorityWatchtowerIncidents
→
Adversarial AI

Attack. Defend.
Before the real thing.

Red and Blue AI agents debate every ambiguous finding before it reaches your team. Verdicts stored and inherited across scans. Attack simulation cycles on live infrastructure.

Red/Blue DebateAttack SimulationVerdict Memory
→
Threat Intelligence

338,000+ CVEs. Live feeds.
No hallucinations.

CISA KEV and EPSS synced daily. Watchtower re-correlates your inventory the same morning new entries appear. EPSS spike detection catches pre-KEV signals.

CVE CorrelationCISA KEVEPSSDark Web IOCData Sovereignty
→
Phishing & Human Risk

Know who would click before attackers find out.

Phishing campaigns built from your own asset inventory, not generic templates. Click and credential tracking per employee. HIBP breach exposure check. Human risk score feeds posture timeline.

Phishing CampaignsCredential ExposureHuman Risk ScoreAwareness Training
→
Iris · Host Agent

4MB Rust daemon. Watches every host from the inside.

Process monitor, file watcher, network events, log scraper. AI triage scores batches before queuing to Horus. Bounded offline queue. Zero OOM. Single install script.

Process MonitorFile WatcherNetwork EventsLog ScraperAI TriageOffline Queue
→

Pick a service.
The agents take it from there.

The live demo has 30 days of posture history, real CVE findings, Red/Blue debate transcripts and phishing campaign results.

Try it! → Self-host free