AI system inventory
The AI components in ARRTECH products.
AI components and what they do
An AI inventory should make the system’s purpose and authority understandable. The components below perform different analytical jobs, with evidence and operating decisions available for review.
Systems
Cyberdroid AI Detection.
Analyzes approved SIEM telemetry for changes in behavior, sequences and relationships on customer-controlled CPU hardware. Findings provide evidence for analyst review. Available now to select organizations.
Cyberdroid AI Investigation.
Takes an AI Detection finding or a SIEM alert, gathers the evidence and writes a case for an analyst to accept. Its language models run locally by default. Early access.
SIEM AI module.
Runs inside ARRTECH SIEM on premises. Machine learning and graph models flag anomalies and multi-step attacks, and risk scores rank the queue.
Verify
Detector changes.
Every detector promotion and rollback is recorded. Each AI Detection detector is tested in shadow on the organization’s data before it alerts.
Recorded requests.
AI Investigation retains the request, outcome and reason, including work that needed approval or could not proceed. That record helps the team examine how the system used its permissions.
Routing metadata.
The routing record identifies the model used for a request. Any external model route is an explicit policy choice.
Scope
Response workflow.
An analyst reviews the prepared case. Response is a separate decision carried out through the organization’s authorized controls and playbooks, with the relevant approvals recorded.
Page scope.
These summaries explain the product’s role. The proposed deployment identifies the enabled functions, supported configuration and operating responsibilities.
