Blackpoint Cyber, CyberProof, Cyrenity and DeepSeas

About CyberProof

CyberProof is a cloud first security operations company and a Managed Detection & Response provider for global enterprises. CyberProof is a UST company that supports enterprises as they migrate to cloud-native environments. CyberProof delivers threat-led, co-managed security operations. CyberProof has achieved ISO-27001 certification and the Type 2 SOC 2 audit. Interpres Security, a startup providing Exposure Management and Defensive Optimization, was acquired by CyberProof in 2024.^[2][3]

CyberProof Agentic MXDR connects AI agents, expert analysts and CDC Reveal360 outcome intelligence into one co-managed service. CyberProof's Agentic MXDR service provides 24/7 expert-led threat detection, triage, investigation, response and continuous improvement. CyberProof Agentic MXDR orchestrates the collaboration of Microsoft, Google, third-party, client-developed and CyberProof agents across one governed security service.^[1][5]

Agents in Agentic MXDR help identify detection gaps, inactive rules, telemetry issues and opportunities for tuning. XProfiler tailors threat profiles to a customer's tech stack, geography and industry using AI-driven enrichment and correlation. ThreatX automates hypothesis generation and query creation across multiple data sources. ReMEDRion performs automated, weekly EDR health checks to ensure coverage, policy compliance and detection readiness. GapGuard validates and enriches MITRE mappings, identifying gaps and suggesting improvements to enhance detection quality. Spectra continuously discovers, classifies and inventories assets across environments, mapping them to owners and controls. CyberForge automates HLD generation using reference libraries, contextual inputs and interactive refinements.^[5][6]

CyberProof's Cybersecurity Estate Management continuously discovers, classifies and contextualizes assets. Cybersecurity Estate Management groups assets as managed, unmanaged or suspicious based on security coverage. Cybersecurity Estate Management continuously uncovers all known and unknown assets across cloud, on-prem and hybrid estates. By connecting with existing security tools and cloud data, Cybersecurity Estate Management automatically enriches assets with business and security context, including ownership, sensitivity and vulnerability exposure. CyberProof uncovers the AI agents, LLM providers and MCP servers across an enterprise, whether sanctioned or not. CyberProof discovers and classifies assets across AWS, Azure and GCP.^[1][7][11]

The CyberProof Threat Exposure Management Platform, powered by Interpres, operationalizes TTP-based cyber threat intelligence. The CyberProof Threat Exposure Management Platform continuously scans an organization's entire digital ecosystem including assets, to ensure defensive controls align to the threats targeting the organization. The CyberProof Threat Exposure Management Platform evaluates the risk associated with each vulnerability or exposure, considering the likelihood of exploitation and the potential impact on the organization. Interpres collector integrations are light-weight, agentless and connected by read-only APIs. Collector integrations allow Interpres to ingest data from security tooling to understand current coverage and to identify and prioritize recommended defensive actions. CyberProof has partnered with Interpres Security to offer a custom Defense Readiness Self-Assessment that provides a continuous threat and exposure management (CTEM) view into organizations. CyberProof covers Cloud Security, Data Security, AI Security, Vuln Management, Pen Testing and IAM Security.^{[1][2][8][9][11]}

CDC Reveal360 is where people interact with CyberProof platform and service data. CDC Reveal360 has a widget based customizable user interface layer and caters for different personas who have different needs. CDC Reveal360 shows what CyberProof is doing: incidents handled, SLAs met, security posture trends and service metrics. CDC Reveal360 visualizes analysis from Interpres: threat-defense coverage gaps, exposure prioritization and estate visibility. The CyberProof Defense Center (CDC) platform supports collaborative, real-time security operations for all stakeholders through orchestration and smart automation.^[10][11]

CyberProof worked with Microsoft to provision and deploy Microsoft XDR and integrate it with a client's current Managed Detection & Response service with CyberProof. CyberProof addresses the cybersecurity challenges in the Retail industry through its managed services, tools and methodologies.^{[1][2][5][7][11][12]}

About Cyrenity

Cyrenity sells managed cybersecurity services covering managed detection and response, threat intelligence, vulnerability management, advisory, AI security, and 24/7 incident response, run as one operation. Cyrenity protects organizations across every industry and serves professional sports organizations. Cyrenity's sports security work covers three MLS clubs: Austin FC, LAFC, and San Diego FC.^[1][2][3][5]

Cyrenity's AI, security, and incident response experts find the AI that people and agents use, set the rules, enforce them while it runs, and prove it to a board and auditors. Cyrenity's AI governance work defends AI from prompt injection and data exposure. Cyrenity's AI Security service hardens the AI features a business builds and buys against prompt injection, jailbreaks, and data exfiltration through model outputs. Cyrenity's AI Security service protects proprietary models against theft, extraction, and unauthorized access across their lifecycle. Cyrenity's AI Security service guards training and fine-tuning pipelines against manipulated inputs. Cyrenity's AI Security service secures the full path from data ingestion to inference. Cyrenity helps organizations set guardrails, acceptable use, access controls, and oversight for AI.^[1][3][6]

Cyrenity's managed detection and response team watches a customer's environment around the clock, investigates what matters, and contains active threats before they spread. Cyrenity's monitoring covers endpoints, identity, cloud, and email, and an analyst triages every alert. When a threat is real, Cyrenity isolates the host, cuts the session, and stops lateral movement. Cyrenity's hunters search a customer's environment for the quiet indicators that automated detection misses. Cyrenity deploys, tunes, and runs the detection stack for customers, correlating signals across tools.^[7]

Cyrenity's incident response brings senior responders, AI-accelerated investigation, and hands-on recovery into one coordinated response. Cyrenity's emergency incident response covers around-the-clock triage, incident command, forensic investigation, containment, eradication, and executive status reporting. Cyrenity's ransomware and extortion response covers scoping, evidence preservation, backup and restoration planning, data-exposure analysis, and coordination with counsel, insurers, and specialist partners. Cyrenity's business resumption work covers clean recovery planning, identity restoration, backup validation, rebuild support, application sequencing, and return-to-service validation. Cyrenity investigates credential theft, session and token abuse, malicious OAuth grants, cloud persistence, business email compromise, and payment fraud. Cyrenity investigates AI system incidents involving prompt injection, unauthorized agent actions, MCP and tool misuse, RAG and memory poisoning, and model or pipeline compromise. Cyrenity runs investigation and recovery at once, coordinated by one incident command. Cyrenity's compromise assessment gives evidence-based answers when something looks wrong but a breach is not confirmed.^[6][8]

Cyrenity runs realistic breach scenarios with a customer's leadership and technical teams. Cyrenity writes role-based incident response playbooks for the scenarios that threaten a customer. Cyrenity builds security policies, escalation paths, and communication protocols.

Cyrenity's threat intelligence analysts watch the hidden online spaces where cybercriminals plan attacks, sell stolen logins, and trade access to company networks. Cyrenity sends alerts to tools such as Slack and Microsoft Teams. Cyrenity's threat intelligence confirms whether company data, employee details, or a brand have shown up on the dark web. Cyrenity's penetration testing attacks an environment the way attackers would. Cyrenity's cloud assessments cover AWS, Azure, and Microsoft 365. Cyrenity ranks every vulnerability finding by exploitability and business impact. Cyrenity re-tests each fix and documents it for auditors.^[10][11]

Cyrenity's security advisors are former CISOs who build the roadmap and sit at the table with a customer's leadership. Cyrenity maps a customer's program to SOC 2, HIPAA, PCI DSS, NIST, and the standards customers and regulators expect, then builds the evidence.^[2]

Cyrenity's engagement maps a customer's attack surface and identifies critical vulnerabilities within 48 hours. Cyrenity follows with continuous monitoring and remediation. Cyrenity's sports offering covers ticketing, fan data, broadcast, venues, and the AI behind performance, with 24/7 response. Cyrenity maps sports organizations' programs to league and federation security requirements.^{[2][3][5][10][11]}

About DeepSeas

DeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments. DeepSeas Complete is a cyber defense program built on Endpoint MDR. DeepSeas Complete combines Vulnerability Management, Penetration Testing, Managed SIEM, Endpoint MDR, Threat Intelligence and a dedicated Strategic Advisor into one security program.^{[1][3][5][6][8][10]}

DeepSeas offers 24/7 MDR for growing organizations with mixed environments, operated by lean security teams on the stack they already own. DeepSeas MDR is one service across IT, cloud, identity, mobile devices and OT environments, including production floors and medical systems. DeepSeas states that it is vendor agnostic: when a customer already runs an EDR or SIEM, DeepSeas operates and tunes it, and when a customer does not, DeepSeas brings its own. DeepSeas MDR begins monitoring in about two weeks, depending on environment complexity. DeepSeas contains threats on the customer's behalf, or gives the customer's team clear steps to handle them. DeepSeas MDR can optionally isolate a host or lock an account, on pre-approved playbooks. DeepSeas continuously tunes detection rules, uses AI to refine alerts, and has analysts validate what matters before it reaches the customer. Detections and alerts come together in the DeepSeas platform, a single place to view security operations.^[1][7][12]

The CyberFusion SOC emphasizes proactive threat hunting, engaging across different teams to stay ahead of potential threats. The CyberFusion SOC provides solutions based on client-specific needs, industry verticals and risk appetites. The CyberFusion SOC uses an integrated, cyclical model with interconnected components like threat intelligence, detection engineering and incident response. DeepSeas threat intelligence analysts study how adversaries operate and gather the data on the DeepSeas platform. DeepSeas has a team of reverse engineers, threat analysts and forensics experts that continuously strengthens its threat intelligence base. DeepSeas analysts write a new detection rule when a hypothesis is confirmed. DeepSeas validated findings become detection rules that deploy automatically across every monitored environment. DeepSeas describes threat hunting as active and human-led, with analysts searching for adversaries that never triggered an alert. DeepSeas turns proprietary and public sources of threat intelligence into tuned detection rules. DeepSeas sources threat intelligence from government, commercial and dark-web channels.^[6][8][9]

DeepSeas combines real attacker tradecraft with manual validation to uncover the hidden attack paths automated testing often misses. DeepSeas offensive testers work across networks, apps, APIs, wireless, cloud, people and physical access. DeepSeas states that its testers are continuously certified, with certifications such as OSCP, OSCE and OSWP. DeepSeas tests by hand to cut false positives and catch what automation misses.^[10]

DeepSeas offers audit readiness and compliance support for SOC 2, ISO 27001, HIPAA, NIS2 and regulated industries. DeepSeas automated control mapping links controls to each standard, and continuous monitoring flags gaps as they surface. DeepSeas experts guide the fixes, get evidence in order, and stay through the external audit with advisory support. DeepSeas packages automated control mapping and evidence into auditor-ready reports. DeepSeas provides board-level guidance, security architecture and program design aligned with business risk.^[11][12]

DeepSeas Complete starts with Endpoint MDR and puts 50+ services within reach, all under one agreement and one pool of credits. In DeepSeas Complete, Endpoint MDR is the only service a buyer has to buy, and everything else is optional. Every service in DeepSeas Complete runs on credits, which buyers purchase in blocks sized to their program. DeepSeas Complete managed services add SIEM, network, cloud and identity coverage as needed. Elective Credits can be applied across 50+ services, including security testing, assessments and advisory engagements. Elective Credits remain available throughout the contract term and carry between contract years on multi-year agreements. DeepSeas needs a user count to size the baseline for DeepSeas Complete, and deployment begins on signature.^{[1][2][5][7][9][10][12][13]}