New One platform for compliance, detection & offensive security

Stay Compliant.
Stay Protected.
Continuously.

Aphelionyx unifies ComplianceHub for AI-driven GRC automation, 24×7 Managed Detection & Response and Active Directory pentesting — purpose-built for India and the Middle East: DPDP, SEBI, SAMA, PDPL, GDPR and ISO 27001.

Built in India 24×7 SOC coverage SaaS, Cloud or On-Prem
app.aphelionyx.com/overview
Compliance Score87%↑ 4.2%
Controls Passing412of 468
Audit Ready94%On track
Framework readiness
DPDP Act
91%
ISO 27001
86%
SAMA CSF
78%
SEBI CSCRF
72%
GDPR
95%
Events / day2.4MIngesting
Open Incidents31 critical
MTTR18m↓ 22%
Credential dumping via LSASSFIN-WS-042 · T1003.001
Containing
Impossible travel sign-inM365 · priya@corp · T1078
Investigating
New admin added to AWS IAMCloudTrail · T1098
Resolved
Port scan from internal host10.2.14.8 · T1046
Resolved
Attack Paths to DA72 critical
Kerberoastable14accounts
Tier-0 ExposureHighFix 3 ACLs
USER WS-042 SVC_SQL DA AdminTo Kerberoast MemberOf
Threat containedHost isolated in 42s
Evidence collectedISO 27001 · A.8.15
AI NativeAgents that learn your org
24×7 SOCHuman-led, AI-assisted
Flexible DeploymentSaaS · Customer Cloud · On-Prem
India-FirstData residency in India
Our Solutions

Three Pillars of Cyber Resilience

Prove compliance, detect threats in real time, and find the attack paths adversaries would use — from one partner, one platform.

Live

ComplianceHub

AI-native GRC automation

Continuously monitor controls, auto-collect evidence and stay audit-ready across Indian and global frameworks.

  • DPDP, SEBI, SAMA, PDPL, GDPR, ISO 27001
  • Automated evidence from cloud, IdP & SaaS
  • Cross-framework control mapping
  • Policy, risk & vendor management
Explore ComplianceHub
Coming Soon

AD Pentest

Automated Active Directory assessment

See your domain the way an attacker does. Map privilege-escalation paths to Domain Admin and fix what matters first.

  • Attack-path graph to Tier-0 assets
  • Kerberoasting, ACL & delegation abuse checks
  • AD CS (ESC1–ESC8) misconfiguration detection
  • Prioritised remediation playbooks
Join Waitlist
ComplianceHub · GRC Automation

Compliance Shouldn't Be Annual. It Should Be Continuous.

Unlike global GRC tools built around Western regulations, ComplianceHub is purpose-built for India and the Middle East. One implementation covers multiple frameworks — so every control you fix counts everywhere.

  • Automated evidence collectionPull proof directly from AWS, Azure, GCP, M365, Google Workspace, GitHub and more — no screenshots.
  • Unified control libraryMap once, satisfy DPDP, ISO 27001, SAMA and GDPR simultaneously.
  • Auditor-ready workspacesRead-only auditor portals with mapped controls, evidence and full audit trails.
Supported
DPDP Act 2023Consent, data inventory, DSARs & breach workflows
Supported
SEBI CSCRFCyber resilience controls for regulated entities
Supported
SAMA CSFSaudi Central Bank Cyber Security Framework
Supported
PDPLSaudi Personal Data Protection Law
Supported
GDPREU General Data Protection Regulation
Supported
ISO 27001:2022Information security management system
Supported
SOC 2 · PCI DSSTrust services & cardholder data security
Supported
ITGCIT general controls across access, change & operations
AI Compliance Workforce

Agents That Do the Busywork

Specialised AI agents continuously monitor and improve your posture — your team focuses on decisions, not spreadsheets.

Compliance Agent

Validates controls against DPDP, SAMA, PDPL, GDPR, ISO 27001 and your internal policies — every day.

Evidence Agent

Collects evidence from your cloud, security stack, identity systems and enterprise apps.

Risk Agent

Detects control failures and compliance drift before they become audit findings.

Privacy Agent

Automates DPDP consent, data inventories, retention policies and breach notification.

Auditor Agent

Builds auditor-ready workspaces with mapped controls, evidence and workpapers.

Regulatory Intel Agent

Tracks changes to Indian regulations and recommends policy and control updates.

Aphelionyx SOC · Live DetectionsMonitoring
Initial AccessExecutionPersistencePriv. EscalationCredential AccessDiscoveryLateral MovementExfiltrationImpact
Managed Detection & Response

Your 24×7 SOC, Without Building One.

Aphelionyx MDR combines our SIEM platform with a team of analysts who monitor, hunt and respond on your behalf. You get enterprise-grade detection without the cost of hiring, tooling and running a SOC.

  • Proactive threat huntingHypothesis-driven hunts across endpoint, network, cloud and identity logs.
  • Rapid containmentIsolate hosts, disable accounts and block IOCs with pre-approved playbooks.
  • Compliance-ready loggingLong-term log retention, FIM and audit reports that feed straight into ComplianceHub.
How MDR Works

From Signal to Resolution

Collect

Lightweight agents and integrations stream telemetry into Aphelionyx SIEM.

Detect

Correlation rules, threat intel and behaviour analytics surface real threats.

Investigate

Analysts triage, enrich and confirm — no alert fatigue passed to you.

Respond

Contain, remediate and report — with a full timeline for auditors and regulators.

24×7Eyes on glass
180+ daysConfigurable log retention
ATT&CKMapped detections
6 hrsIncident reporting support
🚀 Coming Soon

AD Pentest: Find the Path to Domain Admin Before Attackers Do.

Active Directory is the keys to the kingdom. Aphelionyx AD Pentest automates the techniques real adversaries use to map, prioritise and close privilege-escalation paths in your domain.

  • Attack-path graphingVisualise every route from a standard user to Tier-0 assets.
  • Credential & Kerberos weaknessesKerberoasting, AS-REP roasting, weak delegation and stale privileged accounts.
  • ACL & AD CS misconfigurationsDangerous permissions and certificate template abuse (ESC1–ESC8).
j.sharmaDomain User HR-WS-07Local Admin svc_backupKerberoastable IT-HelpdeskGenericWrite ESC1 TemplateAD CS DomainAdmins AdminTo HasSession MemberOf
Integrations

Works With Your Existing Stack

Aphelionyx doesn't replace your investments — it turns their telemetry into detections and compliance evidence.

AWSCloud
AzureCloud
GCPCloud
Microsoft 365Workspace
Google WorkspaceWorkspace
GitHubDevOps
JiraTicketing
SlackAlerts
Okta / Entra IDIdentity
FirewallsNetwork
EDR / AVEndpoint
Syslog / APICustom
Deployment Options

Deploy the Way Your Regulator Expects

Every organisation has unique security, regulatory and data-residency requirements. Choose the model that fits.

SaaS

  • Fastest time to value
  • Automatic updates
  • Fully managed, hosted in India
IDEAL FOR

Startups and fast-moving teams that want results in days.

Customer Cloud

  • Runs in your AWS, Azure or GCP account
  • You own the infrastructure & data
  • Managed by Aphelionyx
IDEAL FOR

Enterprises that need control with cloud flexibility.

On-Premise

  • Full data residency
  • Air-gapped option available
  • Regulatory-grade control
IDEAL FOR

Banks, NBFCs, insurance, healthcare, government and defence.

Why Aphelionyx

Why Teams Choose Aphelionyx

Compliance, detection and offensive testing that share one data model — instead of three vendors that never talk.

What you needTraditional approachAphelionyx
CompliancePoint-in-time audits & spreadsheetsContinuous, AI-driven compliance
Regulatory coverageGeneric frameworks, little regional focusBuilt for DPDP, SAMA, PDPL & GDPR
Threat detectionSelf-managed SIEM, alert fatigue24×7 managed SOC with response
Identity attack surfaceAnnual manual pentestAutomated, repeatable AD assessments
EvidenceLast-minute screenshotsAuto-collected from SOC & integrations
DeploymentOne-size-fits-allSaaS, customer cloud or on-prem
Vendors3+ tools, 3+ contractsOne partner, one platform
FAQ

Frequently Asked Questions

What does Aphelionyx offer?

Aphelionyx is a unified cyber defense and compliance provider. Today we offer ComplianceHub (AI-driven GRC automation for Indian, Middle Eastern and global frameworks) and Managed Detection & Response (24×7 SOC on our SIEM platform). Automated Active Directory Pentesting is launching soon.

What is the DPDP Act and does my company need to comply?

The Digital Personal Data Protection Act 2023 is India's data protection law governing how organisations collect, process and store personal data of individuals in India. Most organisations handling such data are in scope, and penalties can reach ₹250 crore. ComplianceHub helps you map data flows, manage consent and DSARs, and demonstrate compliance.

Which frameworks does ComplianceHub support?

DPDP Act 2023, SEBI CSCRF, SAMA Cyber Security Framework, Saudi PDPL, GDPR, ISO 27001:2022, SOC 2, PCI DSS and ITGC — all sharing one control library so overlapping controls are only implemented once.

How is MDR different from just buying a SIEM?

A SIEM collects logs; MDR adds the people and process. Our analysts tune detections, triage alerts, hunt for threats and respond on your behalf 24×7 — so you get outcomes, not another dashboard to watch.

Can MDR help with regulatory incident reporting?

Yes. Aphelionyx MDR provides long-term log retention, incident timelines and reports to help you meet breach-notification requirements under frameworks such as DPDP, SAMA, PDPL and GDPR. Evidence flows straight into ComplianceHub.

When will AD Pentest be available?

AD Pentest is in active development. Join the waitlist above to get early access and launch pricing.

Where is my data stored?

SaaS customers are hosted in India. You can also run Aphelionyx in your own cloud account or fully on-premise for complete data residency.

Ready to Be Compliant and Secure?

Get a free assessment of your compliance posture and security gaps — and see ComplianceHub and Aphelionyx MDR in action.

No credit card required Onboarding support included India data residency
Contact

Talk to an Aphelionyx Expert

Tell us what you're working on — an upcoming audit, a SOC you need yesterday, or an AD you're worried about. We'll get back within one business day.

Prefer to pick a slot yourself? Book a meeting on our calendar