New One platform for compliance, detection & offensive security
Stay Compliant. Stay Protected. Continuously.
Aphelionyx unifies ComplianceHub for AI-driven GRC automation, 24×7 Managed Detection & Response and Active Directory pentesting — purpose-built for India and the Middle East: DPDP, SEBI, SAMA, PDPL, GDPR and ISO 27001.
Compliance Shouldn't Be Annual. It Should Be Continuous.
Unlike global GRC tools built around Western regulations, ComplianceHub is purpose-built for India and the Middle East. One implementation covers multiple frameworks — so every control you fix counts everywhere.
Automated evidence collectionPull proof directly from AWS, Azure, GCP, M365, Google Workspace, GitHub and more — no screenshots.
Unified control libraryMap once, satisfy DPDP, ISO 27001, SAMA and GDPR simultaneously.
Auditor-ready workspacesRead-only auditor portals with mapped controls, evidence and full audit trails.
Supported
DPDP Act 2023Consent, data inventory, DSARs & breach workflows
Supported
SEBI CSCRFCyber resilience controls for regulated entities
Supported
SAMA CSFSaudi Central Bank Cyber Security Framework
Supported
PDPLSaudi Personal Data Protection Law
Supported
GDPREU General Data Protection Regulation
Supported
ISO 27001:2022Information security management system
Supported
SOC 2 · PCI DSSTrust services & cardholder data security
Supported
ITGCIT general controls across access, change & operations
AI Compliance Workforce
Agents That Do the Busywork
Specialised AI agents continuously monitor and improve your posture — your team focuses on decisions, not spreadsheets.
Compliance Agent
Validates controls against DPDP, SAMA, PDPL, GDPR, ISO 27001 and your internal policies — every day.
Evidence Agent
Collects evidence from your cloud, security stack, identity systems and enterprise apps.
Risk Agent
Detects control failures and compliance drift before they become audit findings.
Privacy Agent
Automates DPDP consent, data inventories, retention policies and breach notification.
Auditor Agent
Builds auditor-ready workspaces with mapped controls, evidence and workpapers.
Regulatory Intel Agent
Tracks changes to Indian regulations and recommends policy and control updates.
Aphelionyx MDR combines our SIEM platform with a team of analysts who monitor, hunt and respond on your behalf. You get enterprise-grade detection without the cost of hiring, tooling and running a SOC.
Proactive threat huntingHypothesis-driven hunts across endpoint, network, cloud and identity logs.
Rapid containmentIsolate hosts, disable accounts and block IOCs with pre-approved playbooks.
Compliance-ready loggingLong-term log retention, FIM and audit reports that feed straight into ComplianceHub.
How MDR Works
From Signal to Resolution
Collect
Lightweight agents and integrations stream telemetry into Aphelionyx SIEM.
Detect
Correlation rules, threat intel and behaviour analytics surface real threats.
Investigate
Analysts triage, enrich and confirm — no alert fatigue passed to you.
Respond
Contain, remediate and report — with a full timeline for auditors and regulators.
24×7Eyes on glass
180+ daysConfigurable log retention
ATT&CKMapped detections
6 hrsIncident reporting support
🚀 Coming Soon
AD Pentest: Find the Path to Domain Admin Before Attackers Do.
Active Directory is the keys to the kingdom. Aphelionyx AD Pentest automates the techniques real adversaries use to map, prioritise and close privilege-escalation paths in your domain.
Attack-path graphingVisualise every route from a standard user to Tier-0 assets.
Credential & Kerberos weaknessesKerberoasting, AS-REP roasting, weak delegation and stale privileged accounts.
ACL & AD CS misconfigurationsDangerous permissions and certificate template abuse (ESC1–ESC8).
Integrations
Works With Your Existing Stack
Aphelionyx doesn't replace your investments — it turns their telemetry into detections and compliance evidence.
AWSCloud
AzureCloud
GCPCloud
Microsoft 365Workspace
Google WorkspaceWorkspace
GitHubDevOps
JiraTicketing
SlackAlerts
Okta / Entra IDIdentity
FirewallsNetwork
EDR / AVEndpoint
Syslog / APICustom
Deployment Options
Deploy the Way Your Regulator Expects
Every organisation has unique security, regulatory and data-residency requirements. Choose the model that fits.
SaaS
Fastest time to value
Automatic updates
Fully managed, hosted in India
IDEAL FOR
Startups and fast-moving teams that want results in days.
Customer Cloud
Runs in your AWS, Azure or GCP account
You own the infrastructure & data
Managed by Aphelionyx
IDEAL FOR
Enterprises that need control with cloud flexibility.
On-Premise
Full data residency
Air-gapped option available
Regulatory-grade control
IDEAL FOR
Banks, NBFCs, insurance, healthcare, government and defence.
Why Aphelionyx
Why Teams Choose Aphelionyx
Compliance, detection and offensive testing that share one data model — instead of three vendors that never talk.
What you need
Traditional approach
Aphelionyx
Compliance
Point-in-time audits & spreadsheets
Continuous, AI-driven compliance
Regulatory coverage
Generic frameworks, little regional focus
Built for DPDP, SAMA, PDPL & GDPR
Threat detection
Self-managed SIEM, alert fatigue
24×7 managed SOC with response
Identity attack surface
Annual manual pentest
Automated, repeatable AD assessments
Evidence
Last-minute screenshots
Auto-collected from SOC & integrations
Deployment
One-size-fits-all
SaaS, customer cloud or on-prem
Vendors
3+ tools, 3+ contracts
One partner, one platform
FAQ
Frequently Asked Questions
What does Aphelionyx offer?
Aphelionyx is a unified cyber defense and compliance provider. Today we offer ComplianceHub (AI-driven GRC automation for Indian, Middle Eastern and global frameworks) and Managed Detection & Response (24×7 SOC on our SIEM platform). Automated Active Directory Pentesting is launching soon.
What is the DPDP Act and does my company need to comply?
The Digital Personal Data Protection Act 2023 is India's data protection law governing how organisations collect, process and store personal data of individuals in India. Most organisations handling such data are in scope, and penalties can reach ₹250 crore. ComplianceHub helps you map data flows, manage consent and DSARs, and demonstrate compliance.
Which frameworks does ComplianceHub support?
DPDP Act 2023, SEBI CSCRF, SAMA Cyber Security Framework, Saudi PDPL, GDPR, ISO 27001:2022, SOC 2, PCI DSS and ITGC — all sharing one control library so overlapping controls are only implemented once.
How is MDR different from just buying a SIEM?
A SIEM collects logs; MDR adds the people and process. Our analysts tune detections, triage alerts, hunt for threats and respond on your behalf 24×7 — so you get outcomes, not another dashboard to watch.
Can MDR help with regulatory incident reporting?
Yes. Aphelionyx MDR provides long-term log retention, incident timelines and reports to help you meet breach-notification requirements under frameworks such as DPDP, SAMA, PDPL and GDPR. Evidence flows straight into ComplianceHub.
When will AD Pentest be available?
AD Pentest is in active development. Join the waitlist above to get early access and launch pricing.
Where is my data stored?
SaaS customers are hosted in India. You can also run Aphelionyx in your own cloud account or fully on-premise for complete data residency.
Ready to Be Compliant and Secure?
Get a free assessment of your compliance posture and security gaps — and see ComplianceHub and Aphelionyx MDR in action.