WRAITH is the autonomous AI red team of the Fiive Eyes core. It lives inside your own estate — across your network, your live databases, and the open internet — attacking it continuously, so no real adversary ever arrives first.
WRAITH completes the Fiive Eyes triad. It turns the platform's sensing and offensive doctrine inward — an autonomous AI red team that hunts the client's own estate, end to end, without rest. IFC0 sees. HUNT hunts. WRAITH haunts.
From sky to soil. Tens of thousands of sensors render the entire battlefield — digital, physical, strategic — in real time, and feed the core.
A 10,000-strong offensive cyber corps. Human judgment in command — full-spectrum exploitation at sovereign scale.
Agentic AI that never sleeps. It walks every path a real attacker would — then seals it and stays, so the enemy walks into WRAITH instead.
The same agentic core, deployed across three operating theatres simultaneously — reasoning, evaluating live exposure, and sealing paths in real time.
WRAITH maps the attack surface of your own network the way an adversary would — synthesising lateral-movement paths through the estate. W-03 · SPECTER · lateral movement synthesis.
WRAITH reads your databases the way an attacker would, ranking crown-jewel data by true exposure and impact. W-06 · WISP · crown-jewel data evaluation.
WRAITH sweeps the open internet for what the world can already see about you — leaked credentials, exposed infrastructure, adversary staging. W-01 · REVENANT · external surface & leak intelligence.
The route that worked for WRAITH no longer works for them — and the enemy trips WRAITH first.
Inherits live IFC0 telemetry across every theatre — assets, identities, data stores, and the external surface — as a single, continuously-updated map of the estate.
Each agent models the estate as a real adversary would: hypothesising attack paths, weighing stealth against detection, and ranking targets by true business impact.
Walks the path in a controlled simulation — proving exploitability and scoring detection probability — before any human operator is ever paged.
Seals the path and stays resident. The route is closed, and WRAITH remains in place — so the next adversary to attempt it walks into WRAITH instead.
Synthesises movement paths through internal infrastructure — pivot by pivot — proving how an adversary would traverse the estate.
Reads live data stores as an attacker would, ranking crown-jewel exposure by sensitivity, accessibility, and business consequence.
Sweeps the open internet and leak ecosystem for exposed credentials, infrastructure, and adversary staging tied to your estate.
WRAITH briefings are issued under NDA to qualified sovereign and institutional principals.