research
Agent security, observability, and post-quantum cryptography. Most of it is open source; Cryptagion ships as a product through KOR IT.
Know your cryptography before quantum does.
A post-quantum readiness platform, shipped through KOR IT. It discovers cryptographic assets across code, certificates and live TLS endpoints, scores each one for quantum exposure, and turns the result into a migration plan a board can actually sign off on.
Crypto-BOM— CycloneDX 1.6, per assetSee where your agent's tokens go.
An open-source observability layer for AI coding agents. Every step an agent takes — every file read, every test run — is logged to a local, typed, evidence-backed ledger. It publishes one agent-agnostic number that nobody else does: the fraction of tokens spent on tasks that actually finished.
useful_context_ratio— the one number that mattersAutonomous Response & Governance Operations System.
A governance-native, identity-first autonomous SOC architecture, co-engineered so that detection speed and operational safety are co-equal first-class constraints rather than a trade-off. Named after Argos Panoptes, the all-seeing giant.
Supply chain attacks that scanners miss.
A supply chain security platform that goes well past basic typosquatting detection — catching build-time compromises, CI/CD infrastructure abuse, and runtime exfiltration patterns, without requiring Docker.