Question 1

What is Risknox?

Accepted Answer

Risknox turns technical exposure into a currency figure your board, your auditor and your insurer can act on, then helps you bring it down. It is five products — Fortress, Compass, Pulse, Accord and DMARC Monitoring — built so the output of one is a valid input to the next.

Question 2

How is it different from a security scanner?

Accepted Answer

A scanner stops at the finding. Risknox takes the signals you already have — a domain check, an assessment, or tooling you own — and prices the exposure in your currency. AI reads the signals; deterministic math prices the risk, so the board gets a range rather than another high/medium/low opinion.

Question 3

Who is it for?

Accepted Answer

CISOs and security leaders, CFOs and risk committees, and SMEs and MSMEs on Fortress. Cyber insurers, MGAs and brokers on Compass, mid-market and regulated companies on Pulse, and CISOs, compliance teams and product teams on Accord.

Question 4

Does it work with our existing tools?

Accepted Answer

Yes. Fortress starts with no agent rollout, and its Advanced edition connects your firewall, DLP and EDR into one posture dashboard. Pulse onboards your logs and endpoints, and Fortress can begin from a domain check, an assessment, or tooling you already own.

Question 5

Can I buy just DPDP?

Accepted Answer

Yes. Fortress DPDP covers data inventory, processing records, rights requests, breach handling and DPIA on its own. Talk to us for pricing.

Question 6

How does Fortress put a number on cyber risk?

Accepted Answer

Every scenario resolves into direct cost, regulatory penalty, loss amount and past-incident benchmark — as a range, not a single pretend-precise number. Calibrate frequency and magnitude with your incidents and sector benchmarks, then work the controls that move the figure.

Question 7

Which frameworks does Fortress map to?

Accepted Answer

Controls, owners, evidence and remediation sit in one journey view, mapped to ISO 27001, SOC 2, DPDP and SEBI CSCRF at the same time.

Question 8

Do we need to roll out agents to start?

Accepted Answer

No. You choose the business lines, assets and scenarios that matter, and calibrate the model from your incidents and sector benchmarks. There is no agent rollout to begin.

Question 9

What does Fortress Lite include?

Accepted Answer

Loss quantification for one business unit, two frameworks of your choice, the DPDP self-audit and a self-serve onboarding checklist — pick only the modules you need and pay online.

Question 10

What does Compass do?

Accepted Answer

Compass is a subscription platform where brokers and insurers onboard clients, collect verified risk signals and price with a quantified view instead of a self-reported questionnaire.

Question 11

Where does the evidence come from?

Accepted Answer

Public exposure — leaked credentials, exposed services, breach history — is collected and attached to the submission. KYC confirms the entity exists and matches the applicant, and the customer’s domains and identities are searched across criminal marketplaces and breach corpora.

Question 12

How is a submission priced?

Accepted Answer

The same loss modelling as Fortress — recognised models such as FAIR, with Monte Carlo simulation — expressed as a range an underwriter can rate against. The underwriter module lets you configure which signals matter for your book and set thresholds.

Question 13

How does a broker onboard a client?

Accepted Answer

Invite the client and Compass collects the signals you configured. The client completes the assessment in Compass directly, or by buying Fortress for a deeper quantified view, and the assessment is attached to the submission and policy file.

Question 14

What is Pulse?

Accepted Answer

SIEM and EDR editions delivered as a monitored service. Alerts reach someone accountable, with containment in minutes instead of queuing in a dashboard.

Question 15

Do we still need our own SOC?

Accepted Answer

Mid-market companies get enterprise-grade coverage without building a 24×7 SOC, and existing security teams offload out-of-hours triage while keeping their engineers on engineering.

Question 16

What does the Managed SOC actually do?

Accepted Answer

Our analysts work the queue around the clock: triage, escalation, containment guidance and a written record. Containment playbooks for the incidents that matter most are agreed in advance, so a decision does not wait for a meeting.

Question 17

How does Pulse connect to Fortress?

Accepted Answer

Pulse prioritises what Fortress says costs the most, so the queue reflects commercial impact rather than severity labels. The monthly report ties detections back to your risk register and Fortress exposure.

Question 18

What is Accord?

Accepted Answer

Accord inventories every model and assistant in use, assesses the gaps and tracks mitigation to closure with a report that survives scrutiny.

Question 19

What does the assessment cover?

Accepted Answer

A structured gap assessment against the controls your sector and board expect, with an evidence trail, plus a security analysis of data flows, model access, third-party dependency and prompt-injection exposure.

Question 20

How does remediation work?

Accepted Answer

Each gap becomes an owned task with a due date, so remediation is visible instead of assumed, and mitigation is tracked through to closure.

Question 21

What do the board and auditors get?

Accepted Answer

Board and audit-ready reporting on AI inventory, open risk and progress over time — a defensible record of what was assessed, when, and by whom.

Question 22

What does DMARC Monitoring do?

Accepted Answer

Check any domain free in seconds, then keep DMARC enforced with continuous monitoring and alerts when someone tries to spoof you.

Question 23

Can we check a domain before buying?

Accepted Answer

Enter a domain and see its DMARC record, policy, SPF and DKIM status in seconds — no signup. Aggregate reports are then parsed into plain English: who is sending as you, from where, and whether it passed.

Question 24

What do we get each month?

Accepted Answer

A clean summary of blocked messages and remaining senders for your security review, alongside alerts when unauthorised senders appear — so you hear it from us, not from a customer.

Question 25

Will enforcing DMARC break legitimate email?

Accepted Answer

The guided DNS steps walk you from p=none to quarantine and then reject, record by record, without breaking legitimate mail. You move once the aggregate report data supports it.

Know your cyber risk in money. Fix it. Insure it.

Recognised by the cybersecurity and insurance industry.

Start with the obligation you actually have.

DPDP Compliance — know where you stand under the DPDP Act

SOC 2 Readiness

Self-Audit

Insurance Readiness

Security Testing

Managed SOC

Virtual CISO

AI Governance

Assess yourself. Fix the gaps. Walk into your audit ready.

Three ways in. One question: what is this risk worth?

Enterprises & CISOs

SMEs & MSMEs

Insurers & Brokers

Five products. Five different jobs.

Fortress

Compass

Pulse

Accord

DMARC Monitoring

Built for industries where cyber risk is business risk.

Assess. Quantify. Fix. Insure.

Assess

Quantify

Fix

Insure

Answer one question before you talk to us.

Check your email domain security

DPDP readiness quick check

Cyber insurance readiness check

Answers before you talk to us.

Start with a number, not a brochure.