◇ ca9.ai · project canine ◇

CANINE

◇Know your exposure before it's exploited.◇

02The problem

An alert on its own isn't a risk. It's a risk when it's corroborated.

An exposed credential, an expiring certificate, a lookalike domain — taken alone, each is noise. Real cyber risk is what survives cross-checking against independent sources. Most tools hand you alerts. We hand you corroborated, prioritised exposure.

Credential Exposure · Known exposures

DNS & Mail Posture · MX · NS · SPF

Corporate Records · Filings · Registers

Attack Surface · Domains · Services

Certificate Data · CT logs · Expiry

Third-Party Risk · Vendors · Supply chain

Network Footprint · Hosts · Routes

Public Disclosure · Advisories · Mentions

03The suite

One engine. Three platforms.

Canine is the engine. Three platforms ride on it — each tuned for a different defender, a different scale of responsibility, and the same threshold for what counts as evidence.

For national CERTsNational-levelSentinel

BLOODHOUND

// watches the national risk surface

Built for national cybersecurity agencies and CERTs. Continuously monitors exposure across critical sectors and essential services, and surfaces the weaknesses that matter most — before they cascade across interdependent systems.

Critical-infrastructure exposure monitoring
Cross-sector dependency mapping
Early-warning prioritisation
Briefing-grade reporting

For security teamsSpecialistAnalyst

CEREBRUS

// reads four ways at once

Built for security and risk teams — threat-intelligence analysts, SOC leads, and due-diligence professionals. Same evidence, four lenses; an assumption only graduates to a finding when two independent lenses agree.

Four-lens analytical framework
Convergence-grade fact promotion
Live working brief, sourced inline
Briefing-grade exports

In developmentEnterpriseSteward

SHEPHERD

// finds what's already exposed

The same engine that powers Bloodhound and Cerebrus, reconfigured for the enterprise — banks, hospitals, everyday businesses. Shows you your organisation's real, externally visible cyber risk in plain language, with clear next steps. No integration required to get started.

Actionable exposure visibility
Zero-integration deployment
Scam & data-exposure response
Briefing-grade exports

04Capabilities

One workspace. Every signal. Connected.

Six defensive engines on a single working picture — cross-referenced, sourced, defensible and verifiable to senior leadership.

i. surface

Attack-surface discovery

Every domain, host, certificate, and service your organisation exposes to the internet — including the ones nobody remembers standing up.

ii. credentials

Credential exposure

Which of your organisation's accounts appear in known exposure datasets, how stale that exposure is, and what to rotate first.

iii. baseline

Exposure baseline

Establish what "normal" looks like for your external footprint. The moment that matters is the change that doesn't fit the pattern.

iv. third party

Third-party risk

Your risk surface includes your vendors'. Surfaces the supplier dependency and the shared infrastructure that changes your own posture.

v. lens

Analyst lenses

The same evidence reads differently for the SOC, the risk office, and the board. Four lenses, one truth, switchable in a click.

vi. brief

Briefing output

Not a report. A briefing the room you walk into can interrogate, cite, and act on — without leaving the page.

◇ The Canine Engine

We don't believe data. We believe data that agrees with other data.

— Practitioner's note · field manual v.2

06Operating principles

Three rules. No exceptions.

The platform was built around these. Not the other way around. Break one and the brief doesn't ship — even if the answer would have been right.

i. convergence

Convergence over flags

One observation is rarely a flag. We treat it as an assumption that shifts the probability of a competing explanation, and require two or more independent signals before naming it a fact.

ii. lens

Lens, not verdict

The same evidence reads four ways: technical, human, organizational, financial. Switching lens reveals what a single view obscures — without changing the underlying truth.

iii. provenance

Provable, or it doesn't ship

Every claim returns to its primary source in two clicks or fewer. The brief you sign is the brief you can defend — to regulators and boards.

A platform that follows its own rules — even when it's inconvenient.

KNOW WHERE YOU'RE EXPOSED.

Every requesting party is vetted, individually, by a person — for who they are and the use case they're bringing to the platform. Tell us yours.

◇ Received. A person will read this. expect a considered reply — not an instant one

Read about the engine →