Knowledge base

Create an account, tell the Infosec Lead what you want protected in plain language, and approve the discovery plan it proposes. The fleet inventories what it can reach, then reports back. Most accounts are productive inside an hour and fully onboarded in under 48 hours.

No. Aktoh runs alongside your existing stack using the integrations you approve. No source-code access is required at any tier.

Unlimited, on every plan including the free Adventurer tier. Phones, laptops, tablets, consoles, TVs, cameras and smart plugs all count as nodes and none of them add to your bill.

Detection, monitoring, deception and containment run autonomously. Anything consequential — patching production, moving money, deleting data, or contacting a third party — pauses for explicit human approval, and every approval is logged and reversible.

Yes. Every action writes a decision log entry with the trigger, the reasoning, the proposed action, the approver, and the resulting change. It is exportable and is the same artefact auditors ask for.

The Infosec Lead is the generalist you talk to. Sleight runs offensive testing, Plutus watches money movement and fraud, Argus handles surface and exposure monitoring, Cerberus handles containment, and EVOLVE tunes defences as the environment changes.

Paid plans include a pool of credits shared across everyone on the account — not divided per seat. Work draws from the pool until it is empty.

Work continues and the excess bills per million tokens at your plan rate: $3.00 on Operator, $2.15 on Professional, $1.75 on Enterprise, $1.55 on Enterprise Plus. You can also pre-buy credit blocks or enable surge capacity during an incident.

Adventurer is $0 with usage at $5.00 per million tokens; typical households spend roughly $3–20 a month. Personal ($10), Plus ($20), Family ($50) and Max ($100) include a credit pool and pass usage through at cost.

Yes. Set spend alerts at any threshold and watch pool draw-down live, with a projected month-end figure. Credits re-up automatically so containment of an active incident is never blocked — a budget setting will never leave you breached.

No, and they bill separately. Outcome packs are scoped deliverables. SLAs are response and resolution guarantees, are heavily customised to your environment, and are available only on paid business tiers.

Aktoh holds SOC 2 Type II. The report is available on request through the Trust Centre, alongside subprocessors, the DPA, and the latest penetration-test summary.

Deliberate. Publishing the names of security customers hands adversaries a target list. Verify us through artefacts in the Trust Centre and anonymised outcomes instead.

Go to the Under Attack page for priority triage steps and the incident line. Do not power down affected machines before capturing state unless there is active data destruction.

Plan changes take effect at the next billing cycle and unused pooled credits do not carry over. Cancelling stops future platform fees; any usage already incurred is billed at the end of the period.