For companies with 1-999 employees. Ten linked AI pipelines cover industry risk, architecture, accounts and weak passwords, phishing triage, document permissions, sensitive data masking, access anomaly audit, backup and ransomware planning, internet asset mapping, and remediation tracking. No agent, no probe, no network scan - we deliver findings and actions; your IT executes them.
Prefer to talk? +86 138 0125 2139 (Mon-Sat 9:00-21:00 UTC+8. Tell us headcount and industry, we will tell you whether to buy.)
Most disappointment in security comes from expectations, not technology. So this section comes first: no exaggerated claims, no promise of absolute safety, no pretending to be something we are not.
Each pipeline answers one question and hands its output to the next, so the final deliverable is not ten disconnected reports but one plan with a single risk register.
No agent, no probe, no plugin. You upload exportable files or fill in forms; the platform returns the plan. Nothing we do requires an inbound connection to your network.
All tiers are fully automated delivery with no human consulting. Annual billing is charged as 10 months for 12 months of use.
| Tier | Employees | Monthly (CNY) | Included |
|---|---|---|---|
| F | 1-99 | 1,999 | All 10 pipelines, templates, self-service reports, local masking channel |
| E | 100-499 | 2,299 | Everything in F plus a monthly AI security review report |
| D | 500-999 | 3,299 | Everything in E plus a quarterly AI security re-check |
Prices are set and billed in CNY. Payment by WeChat Pay, Alipay, PayPal, or bank wire (USD accepted for international wires). Medical/healthcare and financial-industry engagements are declined and refunded in full. We are a Beijing-registered company; a formal invoice (fapiao) can be issued on request.
No. Those block in real time. We identify risk, write the plan and track remediation. They are complementary, not substitutes.
No, and we never say it can. We find the entry points most likely to be exploited before an attack happens and give the concrete action to close them. Execution is your IT's job. We cannot defend against a nation-state APT.
No agent, no proxy, no probe, no plugin. A browser and exportable files are enough. A normal office network works; no dedicated line required.
By default the data goes through a local reversible masking channel: it is encoded in your browser, the decryption key stays local and is never uploaded, so the platform only sees tokens. If the key is lost, the masked data cannot be restored - that is the trade-off, and it is yours to control.
Not at this stage. Both are tightly regulated and need licensed professionals and on-site work; a fully automated SaaS cannot cover that. We decline these engagements and refund in full.
Then it is worthless - that is the honest answer. That is why pipeline 10 breaks the plan into checkbox tasks, requires evidence upload, verifies it automatically and escalates overdue items to the owner. Half the value is the plan; the other half is making it actually get done.
A nine-section report: industry pre-assessment, executive summary, baseline status, per-pipeline findings, consolidated risk register, remediation task list with owners and due dates, blind-spot statement, boundary and disclaimer, and next steps. See the free self-check for the same numbering we use inside the report.
This page describes a security assessment service. It is not a certification body, does not issue compliance certificates, and does not provide legal advice.
12 questions, 30 seconds, no phone number. You will see exactly which doors are open before you spend anything.