Sigmix Red · Hosted AI software

Sigmix Red is hosted AI software your team deploys and activates.

Point it at systems you select. It maps that environment, connects related findings, and holds anything further until someone in your tenant approves it. You start it. You stop it. The software, hosting, and compute stay with Sigmix.

You select the systems → the software maps, connects & ranks → anything further waits for your approval
Open a workspace View the product
Client-controlled Hosted in-Kingdom or on your premises You select the systems You approve each step
sigmix-red · workspace Illustrative
Selected environment ACME-EXT-04 · client-selected systems · locked to that selection
12:04DoneMapped 1,247 DNS records → 341 subdomains, 58 live services
12:04Finding9 dangling DNS records — subdomain-takeover risk
12:04FindingLog4Shell on a forgotten CI host — CVE-2021-44228 · 10.0
12:05ConnectConnecting 5 mediums → one critical path to records DB…
12:05GateHeld for approval — step 05 waiting on your tenant
Connected findings · F-118
Internet Exposed svc Entry point Related item Approval waiting
Inside the console

One workspace — five views.

Inside the console your team gets an overview, connected findings, the environment map, ranked items, and the approvals your tenant signs.

Sigmix Red — Overview
01 · OverviewWhat is in the selected environment, and what is waiting for your approval.
Sigmix Red — Connected findings
02 · Connected findingsRelated items shown as a path, not a long export.
Sigmix Red — Environment map
03 · Environment mapRecords, names, and live services inside the systems you selected.
Sigmix Red — Ranked items
04 · Ranked itemsEach item tied to a reproducible path.
Sigmix Red — Approvals
05 · ApprovalsNothing beyond the read step runs until a person in your tenant signs it.
AI-first, by design

Software that reasons, not a rule list.

Rule engines and exposure scanners are superb at what they have already seen, and they hand back a list. Sigmix Red builds a working model of the environment your tenant selected and reads it from that model — so related items arrive connected as a path, ranked, instead of as thousands of isolated rows.

The Sigmix Red software modelling a client-selected environment
AI-native — a model of your environment, not a rulebook
Signatures & heuristics

Strong at the known.

Rules, signatures and heuristics — excellent against known techniques, run on a schedule and summarised after the fact.

  • Matches a fixed list of known signatures — blind to anything novel or connected.
  • Dumps thousands of isolated issues; a human has to guess which ones connect.
  • Runs quarterly or once a year — stale the moment your environment changes.
  • Cannot see the chatbots and copilots your own teams now run.
Sigmix Red · AI-native

Software that reasons.

An AI model of the environment your tenant selected sits at the core — built from what the software reads there, not from a rule list.

  • Reasons about your environment — a working model of the systems you selected, not a signature list.
  • Connects related findings into the two or three paths that actually reach something that matters.
  • Runs when you activate it — and again when you change the environment, so the picture is never stale.
  • Covers your own AI too — the chatbots, copilots and agents legacy tools cannot see.
vs
What it is

A hosted application, not a project we deliver.

Your admin creates the tenant, selects the systems, and activates the job. The software reads that scope, builds a model, and stops at the approval gate. Your team reviews the result in the product. Our staff host and support the software. They do not start jobs or choose systems.

  • Your tenant, your scope. Your admin creates the tenant, selects the systems, and activates the job — nobody at Sigmix does that for you.
  • The software does the work. It reads the scope you selected, builds a model, and stops at the approval gate.
  • Connected, not a checklist. Related items are shown as a path, ranked and de-duplicated, each tied to a reproducible path — not a 400-page export.
  • Sigmix hosts, and stops there. Our staff host and support the software. They do not start jobs or choose systems.
The Sigmix Red ranked-items view — de-duplicated, each tied to a reproducible path
Ranked items · not dumped
Your real environment

It's not 40 assets. It's everything you forgot you had.

A big organisation accumulates a decade of DNS records, staging sites, acquisitions and abandoned projects. That sprawl — the dangling records, the end-of-life servers nobody owns — is what an inventory never had and a reader never sees. Inside the systems you select, Sigmix Red maps all of it and shows you what is actually reachable.

The client-selected environment, mapped by the software
Your real environment
sigmix-red · environment map — ACME-EXT-04Illustrative
1,247DNS records
341Subdomains
58Live services
23EOL / legacy
9Dangling DNS
6Shadow IT
vpn-old.acme.safirst seen 2018 · owner unknownKnown CVE
legacy-blog.acme.saWordPress 4.2.1 · 14 plugin CVEsEnd-of-life
promo-bf.acme.saCNAME → deleted storage bucketTakeover-prone
autodiscover.acme.saExchange 2013 · unpatchedProxyShell
staging-payments.acme.sanon-prod · internet-reachableExposed staging
app-ios-beta.acme.saCNAME → dead app hostTakeover-prone
ftp.acme.saplaintext FTP · first seen 2014Cleartext creds
wiki-2019.acme.saConfluence · unpatchedOGNL RCE
Red then connects these forgotten records into the paths a scanner would never relate — the dangling record becomes a trusted origin; the end-of-life gateway becomes step one toward the records that matter.
How it runs

A disciplined loop — with the brakes wired in.

Every run follows the same controlled cycle. Nothing beyond the read step proceeds without an explicit approval from a person in your tenant, and every action the software takes is written to a tamper-evident audit record.

01

Select & activate

You select the systems and activate the workspace. The selection is locked; anything outside it is refused, not attempted.

Selected environment
02

Map what you selected

The software maps only what you selected, building a live model of records, names, services and how they relate — read-only.

03

Connect & rank

It connects related findings and ranks them, by how close each path gets to something you actually care about.

04

Hold for approval

Further checks wait for a person in your tenant. Least-intrusive by default; nothing destructive runs, and no data is copied out.

Tenant approval gate
05

Result in the workspace

The result stays in the workspace: what it found, the steps, and the suggested fix — in plain language, routed to the right owner.

06

Run it again

When you change the environment, you run it again — so the picture is never stale. When a fix ships, Red re-checks it.

You run it, you stop it — every action written to an audit record through Sigmix Guard™.
What it covers

One workspace across the systems you select.

Described by outcome, not method. Inside the systems your tenant selects, the software reads across the layers that matter and relates what it finds.

Included

Internet-facing systems

Finds the internet-facing records and services inside your selection — including the ones nobody remembered — and re-reads them when you run it again.

Web & application logic

Reasons about how your apps actually behave — access control, business logic and authentication flaws that signature scanners walk past.

Identity & cloud posture

Maps over-privileged roles, stale keys and risky trust relationships, then shows which ones actually open a path — not just a long list.

The console

One screen your security team actually reads.

Severity at a glance, the paths that matter, and a live view of what the software is doing right now — including anything waiting on your approval.

The Sigmix Red console live in a security operations centre
Live in your operations centre
Client-controlled

Powerful because you hold the controls.

A client security team reviewing results in the Sigmix Red workspace
Client-selected · client-activated · client-stopped
What the client controls

Sigmix Red only ever reads the systems your tenant selected.

It is hosted software licensed to your organisation. The systems it reads are the ones your admin selects; the job starts when someone in your tenant activates it, and stops when they stop it. Selection, approval and oversight are enforced by the product, not just promised in a contract.

Selected environmentYour admin selects the systems. Anything outside that selection is refused, not attempted.
Human approval gatesAnything beyond the read step pauses for an explicit go-ahead from a person in your tenant. Nothing destructive runs by default.
Non-destructive by defaultLeast-intrusive checks. No data is copied out, no service is knocked over to prove a point.
Full audit recordEvery action the software takes is logged to a tamper-evident anchor via Sigmix Guard™.
In-Kingdom & on-premRuns on a sealed appliance in your building or in-Kingdom KSA Cloud. Results never leave your environment.
You start it. You stop it.A job runs because someone in your tenant activated it, and ends when they stop it. Sigmix staff do not start jobs or choose systems.
Where it runs

Deploy it the way your rules require.

Sigmix Red fits your security posture, not the other way around — a sealed appliance in your own building, an in-Kingdom managed cloud, or governed by Sigmix Guard™. Wherever it runs, your environment, results and evidence stay under your control.

Sealed on-prem

On a sealed appliance in your building

Red runs on a sealed Sigmix appliance inside your data centre. Results stay there.

Results stay in your environment
In-Kingdom cloud

Hosted in-Kingdom

Prefer managed? Run Red in an in-Kingdom, data-resident environment — same software, Saudi compute.

Resident in the Kingdom
Governed

Under Sigmix Guard™

Every action is written to an audit record through Sigmix Guard — the same independent enforcement layer that governs the rest of the platform.

Tamper-evident audit
See it in action

Watch it map, connect and hold.

A short walkthrough: the software maps a selected environment, connects a path, and holds at the approval gate. Prefer to read? Take the brochure to your team — bilingual, 20 pages.

Open a workspace Brochure (EN · AR)
Get started

Activate Sigmix Red on systems you select.

Open a workspace, or talk to us about deployment.

Open a workspace Security & evidence

Hosted software. Sigmix Red is hosted software. The client selects the systems, activates the job, and can stop it. Sigmix hosts and supports the software. Sigmix staff do not select systems and do not start jobs. The software reads only the systems the client's tenant has selected, holds anything beyond the read step for an approval signed inside that tenant, and does not run destructive operations by default. Screens shown on this page are design mockups with illustrative data and do not depict any real customer, environment or finding.