ARRTECH Navigation Bar

AI Research

Patented AI algorithms fusing deep learning with graph neural networks to model high-level data abstractions and predict complex behavioral deviations.

Two decades of global research delivering market-leading maturity.  Leading AI research.
ARRTECH - Research & Technology

A detection engine modeled on the brain's predictive error-correction loop.

Our detection engine runs on predictive, error-compensating neural networks, a brain-inspired method that forecasts its own errors and corrects them in real time.

Architected by Alper Cem Yılmaz, the approach reflects a research direction independently validated in the peer-reviewed literature, including work in IEEE Access on error-compensated wavelet neural networks.1 It is the foundation of CYBERDROID Neural Detection.

2020
Peer-reviewed in
IEEE Access
95%
RMSE reduction
vs. prior art
20+
Methods outperformed
in benchmarks
Cortical coding · sparse activation across L1–L6

180+ algorithms across 15 families, from classical statistics to frontier mathematics.

Each family targets a different class of adversary behavior. Findings fuse into coherent attack-chain narratives. No single-method blind spots.

Adaptive Learning
01 / 15
EWMA Z-Score BaselinesRare Transition SequencesOnline Changepoint Detection
Deep Learning
02 / 15
AutoencodersVariational AutoencodersTemporal Convolutional NetworksTransformer Sequence Anomaly
Graph Intelligence
03 / 15
Graph Neural NetworksLink PredictionCommunity Detection DriftDynamic Graph Change-Point
Outlier & Anomaly Detection
04 / 15
Isolation ForestLocal Outlier FactorOne-Class SVMHDBSCAN
Statistical Methods
05 / 15
Mahalanobis DistancePCA Subspace ResidualsGaussian Mixture ModelsKernel Density Estimation
Drift & Shift Detection
06 / 15
KL-DivergenceCUSUMWasserstein DistancePopulation Stability Index
Sequence Analysis
07 / 15
Variable-Order MarkovHidden Markov ModelsSelf-Supervised EmbeddingsGrammar-Based Automata
Causal & Bayesian
08 / 15
Causal Discovery (PC / FCI)Granger CausalityBayesian ChangepointDempster-Shafer Fusion
Frontier Mathematics
09 / 15
Topological Data AnalysisPath SignaturesDiffusion MapsNeural ODE
Advanced Theory
10 / 15
Optimal TransportStein DiscrepancySheaf ConsistencyTropical Geometry

Five more proprietary families are available under NDA during evaluation, covering identity drift, kernel-level egress, and cross-product attack-chain reconstruction.

The science, in production.

Cortical coding and the 180+ algorithm portfolio aren't lab curiosities. Two production surfaces put them in front of SOC teams every day.

CYBERDROID Neural Detection

The detection engine: cortical coding at line rate.

The cortical coding research, in production. CYBERDROID fuses 11 telemetry classes across all 15 algorithm families into one actor-centric reasoning graph.

  • Sparse activation: anomalies in seconds, not minutes
  • Cross-instrument correlation across 11 telemetry classes
  • Local AI inference, zero cloud calls
  • Air-gap capable, classified-deployment ready
CYBERDROID Atlas: host risk graph and correlation view
CYBERDROID SOC Analyst

The analyst surface: investigations, not alert queues.

Where detection meets the operator. Every event arrives as a structured investigation with actor context, evidence chains, and recommended actions, not a line in a queue.

  • Living handoff with priority-ordered actions and full evidence
  • Auditable reasoning: hypotheses, positions, tie-breaks
  • 99.3% machine-cleared escalation
  • Proven from 5 to 100,000+ EPS at nation scale
CYBERDROID SOC Analyst: living handoff and reasoning chain

Twenty years of research. One platform. Built by the people who wrote the papers.

Not assembled from acquired startups. One continuous research program, led by the same people who designed it.

Alper Cem Yılmaz, Founder & CEO of ARRTECH
Founder & Chief Executive Officer
Alper Cem Yılmaz

Two decades leading enterprise security deployments, AI research, and product development. Architect of the full ARRTECH suite, developed CRYPTOSIM and CRYPTOLOG.

  • Security organization operations across 3000+ enterprise deployments
  • 20+ years across SIEM, SOAR, DLP, and AI detection
  • Inventor of CYBERDROID autonomous investigation architecture
  • Customers include 7 of the Fortune 50
Prof. Dr. Burak Berk Üstündağ, Scientific Advisor to ARRTECH
Scientific Advisor
Prof. Dr. Burak Berk Üstündağ

One of the globally leading researchers in brain-inspired AI and anomaly detection. Full Professor at Istanbul Technical University and scientific advisor of ARRTECH.

  • Professor, Computer & Informatics Engineering, Istanbul Technical University
  • Director, National Software Certification Research Center, ITU
  • 100+ peer-reviewed publications · 1,250+ citations
  • ORCID 0000-0001-8143-9434

Every claim on this page is anchored in publicly verifiable research.

A five-year research program in predictive error-compensated architectures, the foundation underneath CYBERDROID Neural Detection. Full bibliography available under NDA.

[ 01 ]

High-Performance Time Series Prediction With Predictive Error Compensated Wavelet Neural Networks.

Ustundag, B. B., & Kulaglic, A.

IEEE Access, 8, 210532–210541.

[ 02 ]

Stock Price Prediction Using Predictive Error Compensation Wavelet Neural Networks.

Kulaglic, A., & Ustundag, B. B.

Computers, Materials & Continua, 68(3), 3577–3593. 33% RMSE improvement over LSTM.

[ 03 ]

Predictive Error Compensating Wavelet Neural Network Model for Multivariable Time Series Prediction.

Kulaglic, A., & Ustundag, B. B.

TEM Journal, 10(4), 1955–1963. Extends PEC-WNN to multivariable input.

2021 · Multivariatedoi.org/10.18421/TEM104-61
[ 04 ]

Improvement in Prediction Performance Using Predictive Error Compensated Neural Networks.

Kulaglic, A., & Ustundag, B. B.

Springer Lecture Notes in Networks and Systems. Ongoing program investment through 2024.

Request a technical deep dive.

A 60-minute working session with the engineers who built it. We cover the architecture, the algorithm portfolio, a live investigation on your own telemetry, and the full bibliography under NDA.

Under mutual NDA · Engineer-led session · No sales overlay

ARRTECH provides monitoring, evidence, and controls to support audits (e.g., SOC 2, ISO 27001, HIPAA, GDPR). Certification outcomes depend on your full program (policies, processes, people, third-party tools).
Daily data-ingest caps are organization-wide (not per endpoint). If usage trends above the cap, we’ll notify you and recommend or a plan change.
Capabilities and limits vary by plan and may change as the platform evolves. Some features and pricing are in limited release.
ARRTECH Footer