Security Product
AiVersary: Board-Ready Threat Intelligence Without a $40K Red Team
Sittadel's threat intelligence product, which I built and run. Give it a company name and domain; it researches public sources like an attacker and delivers an OSINT dossier and attack scenarios a board can read.
aiversary.com
01
Problem
Most organizations can't see what an attacker sees about them, and the usual way to find out, a red team engagement, starts around $40,000. Sittadel wanted the attacker's-eye view of a company's public exposure delivered as a self-serve report, in language a board can act on.
02
Approach
- Built a pipeline that starts from just a company name and domain and researches public sources the way an attacker would: employee exposure, technology footprint, domain intel and social presence.
- Turned that reconnaissance into concrete attack scenarios, such as spear phishing built on the company's actual public data, instead of generic hypotheticals.
- Kept security researchers in the loop: every report is reviewed before it's delivered.
- Wrote the findings for executives, with no technical translation needed, and built the self-serve checkout and the public industry and glossary pages around it.
03
Outcome
- A live product at aiversary.com selling threat reports at $499 each, against $40,000+ for a traditional red team.
- Two deliverables per report: an OSINT intelligence report and an adversarial attack script.
- A self-serve front door to Sittadel's hands-on security services.
Stack
AI agents for public-source reconnaissance.NET research pipeline on AzureHuman expert review before deliverySelf-serve checkout and report delivery
Last updated: