Security outcomes.
Measured. Guaranteed.
ARRAC doesn't promise faster security. It engineers security around measurable outcomes. When a verified threat is discovered, ARRAC acts within defined guarantees.
Six measurable outcomes.
Backed by evidence.
Six measurable security outcomes. Continuously monitored. Backed by evidence. Surfaced through a real-time Guarantee Score.
≤5 seconds for known threats. ≤30 seconds for novel threats under investigation. From verified threat discovery to autonomous containment action.
Cyber risk continuously measured, prioritised and tracked. Open critical and high risks surfaced and reviewed on a defined schedule.
Security controls continuously assessed against ISO 27001 Annex A, Cyber Essentials+, and CIS benchmarks. Evidence produced automatically. Certification track: April 2027.
Controls relevant to your cyber insurance requirements continuously monitored and evidenced. Readiness status surfaced in real time.
Backup integrity, recovery plan currency, and incident readiness continuously assessed. Gaps surfaced before an incident, not after.
ARRAC continuously tests its own security controls, scheduler health, and platform integrity. ISO 42001 (AI Management System) certification track: April 2027.
Guarantee applies while your Guarantee Score is 95–100 with all six dimensions GREEN. Eligibility is monitored continuously. See full terms in your service agreement.
A single number that answers:
are my guarantees being met?
Updated continuously from live platform data. Not self-assessed. Not periodic. Always current.
A score of 95–100 with every category GREEN qualifies for the guarantee — this is not a claim of 100% accuracy or zero incidents.
PLATFORM CONNECTIVITY is shown for diagnostic visibility — it does not contribute to the weighted score.
The guarantee is only as strong as
the conditions that support it.
ARRAC checks eligibility continuously. If conditions slip, the guarantee transitions automatically — and you are notified immediately.
What happens if we miss?
When your Guarantee Score is 95–100 with all six dimensions GREEN and a covered incident exceeds the benchmark containment time, ARRAC's liability and remedy terms are defined in your service agreement.
Specific remedy terms are pending solicitor review and load testing before publication. Contact us for terms.
Discuss guarantee terms →Containment Guarantee
— precise definition.
The platform's containment speed (≤5s known threats · ≤30s novel threats) is a measured technical benchmark — verified in production at 12.3 seconds average. Guarantee as a Service layers a contractual commitment on top of this benchmark, with defined eligibility conditions and remedy terms.
Starts: Verified threat discovery
Ends: Defined containment action successfully executed
- ·Supported M365 identity compromise
- ·Session compromise
- ·Known malicious IP patterns
- ·Recurring attack patterns with established precedent
- ·Critical and high severity events (immediate action)
- ·Customer-disabled autonomous response
- ·Unavailable third-party APIs
- ·Unsupported attack types
- ·Customer configuration failures
- ·Novel patterns without established precedent (escalated to human approval — guarantee re-applies on second occurrence)
ARRAC records the exact timestamp for detection and containment. Every action is logged to an immutable audit trail. The guarantee is evidence-backed — not a marketing claim.
Autonomous decisions
you can explain.
ARRAC's AI Autonomy Engine operates under an ISO 42001-aligned AI management framework. Every autonomous decision is governed, audited, and explainable. ISO 42001 certification targeting April 2027.
ARRAC is compliant with Article 50 of the EU AI Act. Every AI-generated output is labelled. Every autonomous decision is logged. Public AI Transparency Statement: arrac.io/ai-transparency