Systems
Cyberdroid AI Detection.
Behavioral detection with 21 detectors, each disabled, shadow or production. It runs beside your SIEM in your environment, reads its export read-only and never blocks or changes anything. Available now.
Cyberdroid AI Investigation.
Local language models make investigative judgments, and deterministic software runs read-only queries. Inference stays in your environment by default. Early access, and it requires AI Detection.
SIEM AI module.
Part of ARRTECH SIEM on your servers. Machine learning and graph analytics prioritize threats and detect anomalies and multi-step attacks. A learned model of user and entity behavior gives each entity a risk score on a timeline.
Verify
Detector changes.
Cyberdroid AI Detection records every detector promotion and rollback. Each detector is proven on your own data before it can raise a single alert.
Recorded requests.
Cyberdroid AI Investigation records every request as Task, Pending approval, Refused or Rate-limited. Each record carries an operation id and a reason, so you can trace each decision to its request.
Routing metadata.
Routing metadata shows which local model served each Cyberdroid AI Investigation request. The online fallback is a policy you configure and can see.
Limits
Human oversight.
Cyberdroid products observe, investigate and report. ARRTECH SOAR acts on your team's playbooks, and ARRTECH DLP blocks by your rules.
Page scope.
This page describes our products as of Sep 24, 2026. It is not a certification, an audit report or a contract term. Ask us about anything it does not cover.
