Every provider promises detection. Very few will tell you, in writing, how long the last thing they missed went unseen. We operate the capability and we publish the number.
Detection services are compared on tooling and staffing. They should be compared on where the coverage sits and how fast it is proven.
Coverage at entry and coverage at objective are very different services. The stages in between are where dwell time is actually decided.
Not the target, not the SLA. The number achieved on the last engagement, including the case that went badly.
If the answer is the same organisation that operates it, the test is a marketing exercise regardless of how rigorously it is run.
Every one of these paths is detectable. The question a service has to answer is at which stage, and how quickly. Choose an entry point.
Five stages, from the way in to the thing the attacker came for. What changes between paths is how long each stage stays invisible.
We publish the dwell time we actually achieved, not the one in the datasheet. A service that will not tell you where it failed to see something is asking to be trusted rather than measured.
Not four phases of a project — four things running at once. Hover to see what each involves.
Three moves. Two of them are ours, and the one in the middle is deliberately somebody else’s.
Detection engineering, triage, response and the reporting that goes with it. This is an operational service with a named duty owner, not an advisory engagement.
Effectiveness testing of a service Orvix runs is performed by a party that does not report to the team running it. Where a regulator or a board needs the result to carry weight, that party is not Orvix.
Detection gaps found by the test become engineering work with a date against them, and the re-test is run by the tester rather than by us.
Three engagements inside this pillar. Start with the question you can name, or take the whole estate at once.
Detection and response run as a service, with the dwell time written down.
The attacks that arrive as a convincing person rather than as a file.
The estate where availability outranks confidentiality and patching is not free.
Thirty minutes. Bring the incident that took longest to notice and we will map where a gate could have sat.
Book a 30-minute scoping callORVIX · INDEPENDENT AI & TECHNOLOGY ASSURANCE · WE DISCLOSE EVERY COMMERCIAL RELATIONSHIP ON THE PAGE FOR THE SERVICE IT BELONGS TO. WHERE LICENSING IS REQUIRED, DELIVERY IS PERFORMED BY NAMED PARTNERS UNDER THEIR OWN LICENCE.