AI agents, real tools
Specialist AI agents for reconnaissance, vulnerability analysis, exploitation and reporting run real security tools against the scope you authorize.
Autonomous penetration testing
AI agents that attack your network and prove what is actually exploitable.
Piscium runs Radius against the systems you authorize, inside rules you sign. A run takes 2 to 4 weeks, needs nothing installed, and ends with executive, technical and compliance reports. After you fix a path, Radius attacks it again.
Demo data · Attack path validation
Validated chain → Closed-loop fix
Building alongside the security ecosystemPartners, clusters & research allies
What Radius is
and how you buy it.
Radius is the software. Piscium is the team that scopes it, runs it against your environment and hands you the results.
Run by our team
We scope the run with you, agree the rules of engagement in writing and operate Radius. There is nothing to install.
2 to 4 weeks, fixed price
Scope and price are agreed before anything runs. Critical findings reach you the moment they are validated.
Three reports and a retest
Executive, technical and compliance reports, plus a record of every action taken. After you fix a path, Radius attacks it again to confirm it is closed.
See the path an attacker would take.
From the internet to the system you cannot lose.
Each chain is a path Radius proved hop by hop, with the fixes that break it. These chains are demo data.
Walk this chain yourself →Interactive tour of the real product. No signup.
How a run works
Radius follows the loop an attacker follows. This is continuous threat exposure management (CTEM) in practice: after you fix a path, Radius attacks it again.
RADIUS · LIFECYCLEStep 01
The surfaceObserve
01
Observe
Maps assets, services, identities and dependencies, including what the inventory missed. Discovery is passive by default.
02
Reason
Builds the attack graph and ranks each path by what it reaches.
03
Attack
Runs the real chain inside the rules you signed.
04
Validate
Confirms how far the chain got and stops before impact. Every action is logged.
05
Report
Delivers the evidence, the fix and the priority in three reports, then attacks the fixed path again.
Safe enough for OT/ICS,
so safe anywhere.
Testing a plant without touching the process.
Discovery is passive, active steps are authorized asset by asset, and the attack stops before impact.
- No writes to controllers
- Per-asset rules of engagement
- A stop button that works mid-run
RADIUSOT & ICS
FREE EXTERNAL SCANStart with a
Start with a
free scan.
Give us a domain. Radius maps what it exposes to the internet and we send you what it finds. Nothing is exploited, and we confirm you are authorized for the domain first.
Get a free external scan →Or walk the product first, no signup →
OWASP APTS· Aligned
Certifications· None yet. SOC 2 and ISO 27001 on the roadmap
Encryption· In transit and at rest
Rules of engagement· Signed before anything runs