How we work with buyers
Short answers on availability, proof, trust claims, and how to start.
How do engagements typically start?
Book a demo or contact sales. We scope a briefing, optional TCO model, then a time-boxed proof of concept on your perimeter (SaaS, VPC, on-prem, or air-gapped).
Is CyberShield CPA, CVA, and XDR generally available?
Yes. CPA, CVA, and XDR are each 100% global and 100% regional ready (Americas, LATAM, Europe, APAC, ASEAN, SEA, MENA, Africa). Live: cpa.defenailabs.com, cva.defenailabs.com, xdr.defenailabs.com. Local / Technical GRC catalog: 71 frameworks, 32 standards, 1314 controls, 70 country packs, 15 industry packs, 100% catalog live. Enterprise GRC replacement is GVT360 (www.gvt360.com) with CyberShield integration for full GRC replacement. Endpoint protection is CyberShield XDR only (not an MDR SKU). Competitive readiness (archetypes): 100%. Website legal catalog: 100%. Specialist-tool parity is 67% — CVA lists 21 engines at 74% mean catalog depth and 123 capabilities; that is not 21 equally live specialist CNAPP/DSPM/Open FAIR products. Public list prices: /pricing. Live host status: /status.
Is CyberShield an Enterprise GRC or EDR replacement?
Enterprise GRC replacement is GVT360. CyberShield CPA/CVA/XDR provide Local and Technical GRC (controls, evidence, CIP/SIP, signed auditor packs) and integrate with GVT360 for the full GRC stack. Endpoint protection / EDR is CyberShield XDR with native Linux, Windows, and macOS sensors. SIEM / full SOC glass remains optional.
Does 21 CVA engines mean 21 fully live specialist tools?
No. Catalog global/regional readiness is 100%. Mean CVA capability depth is 74% across 123 capabilities. Specialist-tool parity vs CNAPP, DSPM, BAS, SOX, and Open FAIR is 67%. Policy management is first-class. FAIR-lite and SOX ITGC are overlays. MITRE catalog map (697/697) is not independently audited live validation.
Is Sovereign LLM Workbench 100% complete?
Product completion is 100%. Operational residuals remain 5% closed (3 items): external vendor pen-test not executed, Maharashtra government corpus not department-signed, CUDA QLoRA weights not claimed. Models are chosen and deployed to the customer requirement in a sovereign perimeter — there is no public named-model catalog and no product limit on which models can be deployed. MCP ships 19 tools. Live: llm.defenailabs.com. Details on /products/sovereign-llm.
Are the products generally available worldwide?
Yes. All nine catalog products are global-ready, including CyberShield CPA, CVA, and XDR (live at cpa, cva, and xdr.defenailabs.com). Other products are documented on the main site — for more platforms, visit https://defenailabs.com. Deployment models include cloud, private VPC, on-premises, and air-gapped.
Do you publish ISO or SOC certificates on this site?
ISO 27001, ISO 42001, and SOC 2 certificates are under process. The Trust Center documents framework mapping and in-code control evidence. Mapping is not an issued certificate.
Do you publish named customer logos?
No. To avoid competitive disclosure we name industries only — Manufacturing, BFSI, Insurance, MSSP, and MSP. Case studies are sector composites, not identifiable client brands.
Where do developers get API keys?
The public sandbox exercises documented platform endpoints. Production keys are issued after a commercial engagement — not from the marketing sandbox.