How we use AI

The passive reconnaissance panel on our homepage shows what any web server learns about a visitor from the connection alone. When you ask it to analyse your exposure, the narrative is produced using AI-assisted analysis of connection and browser signals. This is an informational review, not an intrusive scan or proof that a device is compromised. AI-assisted reports are identified as such. Personal data handling is described in our Privacy Policy.

Strikeguard, our security posture report for verified domains, uses deterministic checks of public configuration. AI tooling helps explain those findings and draft remediation priorities. A report is limited to the checks performed and does not certify that a system is secure.

Our engineers use AI-assisted development tooling to support implementation, code review, security analysis and documentation. These tools assist professional judgement; they do not replace responsibility for the work delivered.

We are developing AI-assisted workflows for security professionals. Their use in client engagements is governed by the agreed scope and applicable data-handling terms:

• Incident triage. Turning raw alerts, logs and responder notes into a structured timeline, a containment checklist and a status update for executives, for the on-duty analyst to review and send.
• Evidence correlation. Reasoning across endpoint, identity and cloud telemetry to propose hypotheses and the next evidence to pull.
• Findings and reporting. Verifying, de-duplicating and ranking penetration-test findings by root cause and impact, and drafting remediation guidance a tester finalises.
• Incident intake. Structured workflows that help teams describe an incident and prepare the information needed for professional assessment.

• A named person is accountable. AI drafts; a qualified analyst reviews, changes and signs off on every recommendation or deliverable that reaches a client.
• Clear expectations. AI-assisted reports distinguish automated analysis from professional findings. The role of AI in client deliverables is addressed within the engagement.
• Client data stays controlled. No client data is processed by a model without written agreement covering scope, retention and the provider involved.
• Authorised use only. Offensive security work is performed solely under written authorisation and within an agreed scope, and we use our tooling in accordance with applicable law and usage restrictions. See our security and disclosure policy.
• Task-appropriate tooling. We use frontier AI capabilities for reasoning, analysis and drafting. Tool selection does not alter our contractual responsibilities or your data protection rights.

AI output may be incomplete, inaccurate or out of date. Validate recommendations against the relevant evidence and obtain qualified review before making operational changes. Website tools do not establish an emergency-response engagement, guarantee an outcome, or replace an agreed professional assessment.

We describe our capabilities without publishing internal architecture, supplier identities or proprietary implementation details. Relevant information is provided through appropriate due-diligence and contractual channels where required. Commercial confidentiality does not restrict mandatory disclosures or individual privacy rights.

Ask us anything about how AI is used in an engagement at info@cyberlinksec.com.