Armadin, Assail, Reflex Security and Threat Intelligence

About Assail

Assail sells Ares, an autonomous offensive security platform that tests applications, APIs, mobile apps and AI systems and shows what an attacker could actually reach.^[1]

Assail says Ares continuously tests applications, APIs, mobile apps, and AI systems as they change. Ares follows attack paths, exploits weaknesses, and proves what an attacker could actually reach. Coordinated AI agents extend testing capacity, and Ares tests authenticated applications through the customer's existing identity provider. Ares also tracks changes across known and shadow APIs and delivers the evidence behind each confirmed risk.^[3]

Assail describes Ares as combining autonomous red teaming, attack surface management, and Shadow AI discovery across web, API, mobile, and supported AI environments, with applicable MITRE ATLAS coverage. The Ares platform is powered by Assail's domain-adapted model for security reasoning and tool use.^[3][7]

On deployment, Assail says Ares can run within the customer's own infrastructure, even in disconnected environments. With Assail Anywhere, the entire platform, including the AI model, deploys on-premises, inside isolated and air-gapped networks, in the customer's own cloud, or through Assail's SaaS. Assail has also announced that it expanded Reaper's sovereign deployment architecture to AWS GovCloud and Google Cloud Assured Workloads.^[3]

Assail names Ares, Reaper, and Scorpion as the products taken to the fight. Reaper is described as autonomous offensive cyber operations built for military, federal, and intelligence missions.^[3]

Assail publishes industry pages for manufacturing, financial services, federal and state government, automotive, retail, and defense. In manufacturing, Ares validates systems such as ERP, MES, PLM, supplier portals, industrial APIs, and connected products. In financial services, Ares validates APIs, payment rails, mobile banking apps, and open banking integrations. For retail, Ares validates e-commerce web apps, mobile shopping apps, loyalty APIs, and gift card platforms. In automotive it covers telematics APIs, OTA infrastructure, and mobile companion apps.^{[4][5][6][9][10]}

Assail says its team brings 26 years of offensive security experience. Assail also publishes original research on attack techniques and the exploitation of AI and API surfaces. A customer, Branch, says Ares helps its security team increase penetration testing frequency and validate remediations faster.^{[1][2][3][4][5][6][8]}

About Reflex Security

Reflex Security says a breach cannot be controlled, and that a team cannot pick the day, the attacker or the exploit. Reflex Security says a team's response is the only part of a breach that the team owns. Reflex Security says incident training usually means a traditional tabletop exercise made up of slides, a facilitator and a room.^[1][2][3]

Reflex lets a team describe the incident, or start from what Reflex already knows about the team. Reflex builds a tailored scenario in minutes, catered to the real environment, tools and threats of the team. Reflex users pick a threat, and Reflex handles the prep and the paperwork.^[3]

In a Reflex exercise, the team works a live breach while an adaptive adversary and pressured stakeholders push back in real time. Reflex tests breach coordination across technical, legal and executive teams.^[3]

Reflex produces an after-action report the moment the team finishes the exercise.^[2][3]

About Threat Intelligence

Threat Intelligence delivers cyber security products and services. Threat Intelligence services combine cyber security consultants with security automation. Evolve is a Security Automation Cloud designed and operated by the Threat Intelligence team. Evolve built-in security capabilities automatically detect, prioritize, and remediate threats.^[1][2][3][4]

Evolve provides solutions for large enterprises and medium-sized businesses. Evolve maps major security standards and frameworks to ensure the right security controls are in place. Evolve automatically generates pre-configured Evolve Virtual Appliances for deployment into corporate networks and on-premise data centers. Evolve Virtual Appliances support VMware or Hyper-V, and third-party cloud providers including AWS and Azure.^[4]

Symbion, a national wholesaler of healthcare services and products, needed to evaluate its current security posture and identify major security gaps. Symbion turned to EvolvePT, an automated pen testing solution. Threat Intelligence combines its penetration testing tool, EvolvePT, with a certified, principal-only team of penetration testing consultants. EvolveAST helps organizations orchestrate and automate the integration of application security testing into DevOps pipelines. EvolveIR is an automated incident response tool that can detect and respond to security threats. EvolveDW monitors domains and keywords on the dark web and alerts the customer team when data leaks or threats are detected.^{[1][4][5][6][7][9]}

Threat Intelligence uses a Purple Team method in which its Principal Consultants collaborate with the internal security team of the customer. Threat Intelligence evaluates web and mobile applications in five phases: reconnaissance, scanning, vulnerability assessment, exploitation, and reporting. Penetration Testers at Threat Intelligence hold qualifications like CEH, OSCP, or GPEN.^[6]

Threat Intelligence incident response services provide containment, digital forensic investigation, and remediation assistance. Threat Intelligence offers a 30-day monitoring option after containment to prevent threats from resurfacing. Threat Intelligence offers Board Tabletop Exercises. The Threat Intelligence specialist team manages major security breach investigations and ransom and extortion campaigns every month for local and global organisations. Threat Intelligence has provided support during significant data breaches, including the Medibank 2022 and the Latitude 2023 incidents.

In its IRAP assessments, Threat Intelligence guides customers through Information Security Registered Assessors Program (IRAP) compliance. Threat Intelligence provides guidance on securing ISO 27001 certification for an Information Security Management System (ISMS). The services also cover HIPAA, described as a regulation for securing Personal Health Information in healthcare. The services also cover NIST, described as controls for critical infrastructure operators to manage cybersecurity risk.^[9][10]

EvolveMDR combines security specialists with Evolve Security Automation capabilities to streamline security operations. Threat Intelligence has cybersecurity experts in Sydney. Threat Intelligence professional services are delivered by CREST certified cyber security consultants. GT Law is an independent Australian law firm. GT Law turned to Evolve Security Automation. Threat Intelligence contributes to the development of global security methodologies, standards, and libraries that are incorporated into industry-specific security regulations of the Open Web Application Security Project (OWASP).^{[1][4][7][9][11][12]}