What each app does
Twelve focused security apps plus the ATLAS hub. Buy any on its own, or get them all — each runs standalone and gets sharper when the others are watching too.
Hub
ATLAS
Unified Security Intelligence
The hub that ties it together: one sign-in, unified dashboards, shared integrations and a single intelligence picture across every Medusyx product you're licensed for.
- Single sign-on across every Medusyx product
- Unified dashboards and shared integrations
- One intelligence picture — the fleet learns as one
Discover & Predict
Phantom
Attack Surface Management
Continuously discovers everything your organization exposes to the internet — domains, subdomains, cloud assets, certificates and leaked credentials — and ranks every exposure by what an attacker would reach first.
- Continuous external discovery of domains, subdomains, cloud assets & certificates
- Leaked-credential and exposed-account monitoring
- Attacker's-eye exposure ranking with step-by-step remediation
Oracle
Predictive Vulnerability Intelligence
Forecasts which vulnerabilities are most likely to be exploited against you — fusing CVE, EPSS and CISA KEV signals — so you fix what actually matters before it's weaponized.
- Fuses CVE, EPSS and CISA KEV into one exploit-likelihood score
- 30 / 60 / 90-day exploitation forecasts per asset
- Tracks predicted-vs-confirmed accuracy over time
Bloodhound
Attack Path Mapping
Maps the identity attack paths that lead to your crown jewels, showing exactly how an attacker would chain permissions to domain admin — and where to cut the path.
- Maps identity attack paths to your crown-jewel assets
- Analyses privilege chains all the way to domain admin
- Recommends the cut-points that break the path
Detect & Hunt
Specter
Threat Intelligence
Watches dark-web markets, breach corpora, paste sites and ransomware leak blogs for your brand, domains and credentials, and alerts you the moment your exposure surfaces.
- Monitors dark-web markets, breach corpora, paste & ransomware-leak sites
- Brand, domain, VIP and credential watchlists
- Confidence-scored findings with threat-actor tracking
Pathfinder
Malware Campaign Analysis
Classifies malware, reconstructs the full origin-to-impact chain and attributes samples to the actors and campaigns behind them — emitting IOCs the rest of the suite acts on.
- Classifies malware and attributes family + actor
- Reconstructs the full origin-to-impact chain
- Emits an IOC feed the rest of the suite acts on
Tribunal
Insider Threat Detection
Correlates identity, HR and data-access signals to surface insider risk — departures, privilege creep and anomalous access — before it becomes an incident.
- Correlates identity, HR and data-access signals
- Detects departures, privilege creep and anomalous access
- Insider-risk scoring with investigable case timelines
Praecox
Early Warning
Correlates pre-attack signals across your stack and the rest of the suite to warn you of an intrusion taking shape — while there's still time to act.
- Correlates pre-attack signals across your stack and the suite
- Early-warning scoring before an intrusion matures
- Library of emerging attack sequences
Stygion
Honeytoken & Honeypot Hunt
Seeds high-fidelity decoys — credentials, keys and canary records — across your environment and fires the instant an intruder touches one, turning attacker curiosity into a confirmed catch.
- Seeds high-fidelity decoy credentials, keys & canary records
- Fires the instant an intruder touches one
- Correlates every catch suite-wide
Defend & Respond
Bastion Dawn
Adaptive Web App Firewall
An adaptive web application firewall that learns from every blocked attack across the fleet and auto-hardens your apps against the techniques already hitting everyone else.
- Adaptive web application firewall
- Fleet-wide learning that auto-hardens against new attacks
- Per-app traffic and block analytics
Deadbolt
Automated Credential Rotation
Keeps secrets fresh and safe by rotating credentials automatically on schedule — or the instant Specter finds one leaked — directly in your vaults.
- Automated, scheduled credential rotation
- Leak-triggered rotation the moment Specter finds an exposure
- Native to AWS Secrets Manager, Vault and Azure Key Vault
Muzzle
Data Kill Switch
Cuts exfiltration paths the instant a breach is confirmed — an automated kill switch that contains data loss across edge, endpoint and network in one decisive action.
- Automated data kill switch on a confirmed breach
- Containment across edge, endpoint and network
- Triggered by Stygion, Tribunal or Pathfinder
Govern
Ironclad
Security Posture & Audit
Turns your controls into continuous, audit-ready evidence — tracking framework coverage and posture so compliance is always a click away, never a fire drill.
- Continuous control-coverage and posture scoring
- Audit-ready evidence packs on demand
- Maps to SOC 2, ISO 27001 and custom frameworks