Services

From pilot to day-to-day operation

We help you install, train on your own baseline, tune and operate AI-based defense — moving from observation to enforcement in measured steps. MSP for databases is available as a secondary service.

Core services

AI defense services

Build-out & deployment

Install and configure AI Security Suite in your environment — including closed networks.

  • Environment review: OS, privileges (root / CAP_NET_RAW / CAP_NET_ADMIN), firewall backend, capture points (interface or mirror port).
  • Installation in a virtual environment, dependency setup, self-test and test-suite check.
  • Configuration of config.yaml: logs location, allowlist, detector thresholds, UI and alerting (syslog / webhook).
  • Optional service setup (the manual’s systemd example is untested — we validate it in your environment first).
  • Integration of JSONL alerts with your SIEM.

Consulting & tuning

Make the models fit your traffic instead of a benchmark.

  • Collect normal traffic / logs and train the baseline (Isolation Forest, Autoencoder, HIDS).
  • Measure precision, recall and false-positive rate on your data; set thresholds, min_votes, BPF filters and time windows.
  • Allowlist design so administrators and health checks are never blocked.
  • Review of limits and legal / privacy aspects (retention, access, authorization) with your team.
  • Advice on high-throughput capture options when Scapy is not enough.

Operation support

Keep the system observable and trustworthy after go-live.

  • Dry-run observation reviews and staged enablement of enforcement with --rollback-on-exit at first.
  • Dashboard and report review; false-positive handling and allowlist maintenance.
  • Audit-chain verification, log rotation / retention checks and off-box backups of audit logs.
  • Baseline retraining when your environment changes; model and rule (YARA) updates.
  • Troubleshooting using the product’s documented procedures.
Secondary service

MSP — database installation and operation

In addition to security, AegisMind offers managed installation and operation for MySQL, MariaDB and InfluxDB. Detailed scope is agreed individually.

MySQL / MariaDB

Installation, configuration, user and privilege setup, backup / restore planning, monitoring and routine operation.

InfluxDB

Installation and operation of time-series databases, e.g. for metrics and monitoring data, including retention planning.

Security-aware operation

Because we are a security specialist, access control and log handling are considered together with operations.

How we work

Principles for every engagement

We do

  • Start with dry-run and measure false positives on your data.
  • Document what was verified and what was not.
  • Put your administrators and critical systems on the allowlist before enabling any block.
  • Keep rollback and console access ready.

We don’t

  • Promise detection of every threat or zero false positives.
  • Use or distribute real malware outside isolated analysis environments.
  • Use the suite on networks without the owner’s written authorization.
  • Quote performance numbers that your own data has not confirmed.

Talk to us about your environment

Tell us about your network, hosts and constraints. We will propose a dry-run-first pilot plan — no obligation.