IAM
Who owns users and roles
- Tenant-admin owns IAM; Super Admin owns tenancy.
- Role matrix is enforced in UI and API.
- Leadership can take partnership intents from contact.
Leadership
The team accountable for what CyberDragon claims.
Axix Technologies LLC USA runs CyberDragon as one product organisation: detection engineering, OT delivery, applied cryptography, and threat research report into the same roadmap.
Founder & CEO
The person accountable for the CyberDragon roadmap.
Muhammad Ali Arshad
Founder & Chief Executive Officer
Sets the CyberDragon thesis: one platform that treats enterprise, OT, IoT, and IIoT as a single kill chain instead of four disconnected tool stacks. Owns the roadmap from Edge collection through evidence-grade auditor output.
Product strategy, OT security architecture, customer outcomes
Leadership team
Who owns which part of the platform.
Chief Technology Office
Platform & Detection Engineering
Runs the Core control plane — ingest, threat-intel fusion, cascading W15/W60/W24 correlation, and the Neo4j attack-path graph — plus the signed YAML detection packs that ship to every tenant.
Kafka control plane, Temporal orchestration, detection content
Office of the CISO
Security, Trust & Compliance
Owns the security program behind the platform: hybrid post-quantum identity, OPA authorization, PostgreSQL row-level tenant isolation, break-glass procedure, and the tamper-evident evidence chain auditors rely on.
IEC 62443, NERC CIP, SOC 2, ISO 27001, evidence integrity
OT Engineering Practice
Edge & Industrial Delivery
Installs Edge at the industrial DMZ, validates SPAN/TAP capture, tunes Modbus, DNP3, OPC-UA, and MQTT parsing per site, and keeps the safety rule absolute — no command plane into Purdue L0–L2.
Purdue-aligned deployment, protocol parsers, plant-side rollout
Customer & Partner Success
Proof of Value, MSSP & Support
Runs the path from 7-day free trial to 30-day Proof of Value to production go-live, and enables MSSP partners on cross-tenant operations, white-label options, and client onboarding.
PoV delivery, MSSP enablement, hypercare and SLAs
Threat Research Unit
Intelligence & Adversary Emulation
Maintains the live Threat Atlas feeds, the 15,093-IOC corpus, and the six lab-validated attack scenarios that measure detection quality — including the 14.3-second APT kill-chain benchmark.
Threat Atlas, IOC corpus, purple-team scenarios
SOC
Accountable for what we show buyers
- Live / partial / roadmap labels are a leadership rule.
- The Unified SOC is the demo of record.
- Engineers join PoVs.
Operating principles
How decisions get made.
Vault
Evidence the team will stand behind
- Verify chain is not a marketing checkbox.
- Auditors get export; operators keep least privilege.
- Same product org: detection, OT, crypto, research.
Delivery history
What the team has shipped.
01
Platform foundation
Kafka-backed Core, PostgreSQL RLS multi-tenancy, and the first Modbus/DNP3 Edge collector.
02
Post-quantum identity
Hybrid ML-DSA-65 + Ed25519 session JWTs with Vault-backed signing material went live.
03
Kill-chain correlation
Cascading W15 / W60 / W24 windows plus explicit Enterprise→OT pivot signalling.
04
Evidence vault
Hash-chained, signed audit trail with auditor ZIP export and verified 66-entry lab chain.
05
Lab validation
22.4-hour baseline: 41,959 events, 6/6 attack scenarios detected, 0 false incidents, 8.0–20.5s MTTD.
06
Threat Atlas
Public IoT/ICS threat, malware, and ICS advisory board built on live CISA and ransomware disclosure feeds.
Who we build for
Every role in the buying group gets an owner.
| Role | What they care about | What CyberDragon gives them |
|---|---|---|
| CISO | Board-level risk narrative, quantified exposure, and audit readiness | Executive reporting, FAIR scenario scoring, and signed evidence packets. |
| SOC Manager | Alert quality, MTTD, and analyst throughput | Kill-chain correlation instead of raw alerts, plus playbooks with approval gates. |
| OT / Plant Engineer | Nothing may disturb the process | Passive SPAN capture, no agents on PLCs, no command plane into L0–L2. |
| Compliance Lead | Control coverage and evidence on demand | Auto-mapped IEC 62443, NERC CIP, NIST CSF, ISO 27001, and SOC 2 controls. |
| MSSP Operator | Margin, isolation, and onboarding speed | PostgreSQL RLS tenancy, cross-tenant portfolio views, and white-label options. |
| Auditor | Can this record be trusted? | Tamper-evident hash chain with Ed25519 signatures and reproducible verification. |
FAQ
Frequently asked questions.
Who is accountable for the product roadmap?
The founder and CEO of Axix Technologies LLC USA owns the CyberDragon roadmap end to end, from Edge collection through auditor-facing evidence export.
Do you publish honest feature maturity?
Yes. Live, partial, and roadmap labels appear across this site and in the platform pages. We would rather lose a deal than oversell a capability.
Can I speak to an engineer during evaluation?
Yes. Proof of Value and pilot engagements include a named engineer, and the 7-day free trial includes onboarding and ingest validation support.
How do I reach the leadership team?
Use the contact form and select the partnership or enterprise intent — those requests route directly to the leadership team.
Start your 7-day free trial.
A dedicated CyberDragon tenant on your own traffic — not a slide deck. See kill-chain cyber defense on your network.