The AloupaAI Platform
Continuous Intelligence-Grade Security. Validated Onshore.
AloupaAI continuously maps your external attack surface, chains vulnerabilities the way an adversary would, and delivers board-ready ISM/ISO metrics-validated by Australian intelligence veterans.
100% Australian Owned & Operated
Aligned with ASD ISM & Essential Eight (2026 Baseline)
Human-in-the-Loop Zero False-Positive Guarantee
PayPal & Invoiced Corporate Booking Support
Predictive Mechanics
How the engine works.
Continuous Discovery
AloupaAI enumerates your full IP scope - not a point-in-time snapshot. Attack paths are chained and re-evaluated as your surface evolves.
AI Attack-Path Mapping
Frontier AI systematically chains vulnerabilities across hosts, services, and credentials - the way a real adversary would.
Human Validation
Every finding is reviewed and confirmed by a senior security professional before it reaches your report. Zero false-positive noise.
Interactive Attack Chain
Trace the adversary's path.
AloupaAI maps the full adversary kill chain - from initial reconnaissance to crown-jewel impact. Click a stage to trace that phase.
Surface Enumeration
AloupaAI enumerates every live host, service, and exposed credential across your external IP scope - continuously, not at a single point in time.
Live Threat Profile Previewer
See who's targeting you.
Select your sector and organisation size. AloupaAI instantly maps the threat actors, TTPs, and controls most relevant to your profile.
Top 3 Threat Groups
- 01APT40 (Kryptonite Panda)
- 02Volt Typhoon (Vanguard Panda)
- 03Salt Typhoon (GhostEmperor)
Primary MITRE ATT&CK TTPs
- T1190Exploit Public-Facing Application
- T1566.001Spearphishing Attachment
- T1133External Remote Services
- T1078Valid Accounts
Priority ISM / Essential Eight
- ISM-1420Patch operating systems and apps within 48 hours of release
- ISM-0941Multi-factor authentication for privileged & remote access
- ISM-1403Restrict administrative privileges
- ISM-1708Backups - daily, offline, tested
Asset Visibility
What AloupaAI sees.
External IP scope - all live hosts, services, and exposed credentials
Attack-path chains - lateral movement from initial foothold to crown jewels
Control gaps mapped against ISM, ISO 27001:2022, and NIST CSF
Plain-language remediation tasks - no CVE decoding required
Board Metrics
From telemetry to decisions.
Exposure Score
A single number your board understands - derived from real attack-path depth, not checkbox compliance.
Risk Velocity
How fast your posture is changing. Trending up or down, week over week.
Remediation Burden
Hours of work to close the gap - quantified, prioritised, and ready for resource planning.
AloupaAI AloupaHub
Move from a one-off assessment to continuous security governance. Subscribe to unlock your live Security Resilience Score, threat mapping, and control tracking.
Choose your tier below - you'll create an account, then complete secure payment via Stripe.
Basic
$99/mo
Continuous monitoring and threat-pulse alerts for organisations starting their resilience journey.
- Live AloupaAI threat-pulse feed (MITRE ATT&CK mapped)
- Sector-relevant threat alerts
- Monthly resilience posture review (email summary)
- Instant email alerts on score drop
- Read-only access to the Resilience Hub dashboard
Create an account to complete payment
Professional
$290/mo
Live resilience scoring, control tracking, and priority threat mapping for an active security program.
- Everything in Basic, plus:
- Live Security Resilience Score (0-100), recomputed on demand
- ISO 27001 control implementation tracker
- Risk register with heat-map scoring
- Priority threat mapping against your sector
- Evidence locker upload & coverage view
Create an account to complete payment
Enterprise
$750/mo
Full governance, dedicated threat modelling, and executive review for regulated or high-stakes environments.
- Everything in Professional, plus:
- Dedicated adversary threat modelling & TTP mapping
- Quarterly executive resilience review (recorded briefing)
- Priority request-a-briefing access
- Gap assessment & SoA builder tooling
- Dedicated analyst support channel
Create an account to complete payment
Book Your Assessment
$2,000 AUD ex GST.
Up to 30 host IP addresses. Fixed price. No surprises.
Human validation · Plain-language remediation · ISM/ISO/NIST aligned · Executive summary included
Web Application Testing
Web application testing starts from $7,000.00 AUD, reflecting the complexity these engagements often involve. The specific scope of testing determines the final cost.
View web application testingYour Details
A senior principal will be in touch within 24 hours to confirm scope.