Ronin Grid
Book a briefing
A cyber-samurai in a black kabuto helmet with glowing teal visor markings and almond armour plates, set against a splash of black ink.
Autonomous response · v4.2

Defence with a steady hand.

Ronin Grid reads every signal across endpoint, identity and cloud, contains the attack in milliseconds, and keeps a signed record of every move.

Book a briefing Watch a containment
38 msmedian containment
99.2%alerts auto-triaged
24/7no extra headcount
Guarding 1,200+ mid-size enterprises
  • Halvorsen Freight
  • Kestrel Health
  • Ostrava Mutual
  • Pallas Retail
The platform

Read the attack. Cut it off. Prove what happened.

One autonomous platform replaces the triage queue, the containment runbook and the evidence spreadsheet.

Read

One detection model across endpoint, identity, email and cloud, so attacks can’t hide between tools.

140+ signal sources

Cut

Isolate a host, revoke a token or roll back a change automatically, inside policies you approve.

38 ms median

Record

Every decision is signed with its reasoning, ready for ISO 27001, SOC 2 and Essential Eight audits.

Evidence pack in 3 clicks
Close-up of the guardian’s visor, its teal triangle markings glowing.
Sentinel Visor
Detection

It sees the whole field, not one alert at a time.

Sentinel links processes, identities and data flows into one live graph, so a phishing click and a strange admin login read as the same attack.

Mean time to detect
1.8 s
False positives sent to analysts
0.3%
Telemetry retained, searchable
400 days
Deploys in
1 day
Response

A ransomware attempt, contained in 0.4 seconds.

The log from a real-pattern test at a freight company. No analyst touched it until the case was closed.

  1. Encryptor spawnedinvoice.xlsm launches an unsigned binary on FIN-LT-0442.
  2. Verdict: ransomware, 0.98Policy P-12 allows automatic containment for this asset class.
  3. Host isolatedNetwork access cut. The process tree is frozen for forensics.
  4. Session revokedThe user’s cloud tokens are rotated in case of credential theft.
  5. Zero files encryptedShadow copies verified intact. Business as usual.
  6. Case closed and signedThe on-call analyst gets a one-page summary with the evidence attached.

“It feels like hiring a night shift that never gets tired, and never acts without telling us why.”

Ines Okafor · CISO, Pallas Retail
Get started

Put a guardian on your network.

A 30-minute briefing with an engineer, mapped to your stack and your threat model.

Book a briefing Read the architecture brief
briefings@ronin-grid.example
Gallery