NET4NINJAORIA AI

Give ORIA a goal. It plans, uses real tools, checks the evidence, and hands back a verdict, a fix or a finished document.

Open ORIA See it work
Agent run · Phishing triage
ORIA chat: a user asks whether an Outlook Web App login link is phishing. ORIA shows its plan, then six completed steps: checked threat intelligence, read the page, searched the web, ran Python, saved to memory, and built a PDF.

01How it works

Each tool call appears as it happens, with its arguments, its result and how long it took. Nothing runs out of sight.

01

Plans

Reasons about the goal and lays out the steps before it touches a tool.

02

Acts

Searches, reads pages, runs Python, checks threat intelligence and calls your connected tools.

03

Checks

Ties each claim to a source or a tool result, and says when the evidence is thin.

04

Delivers

Hands back the verdict, the fix, or the Word, PowerPoint, PDF or Excel file you asked for.

Runs Python on the evidence
ORIA's Python step expanded: code that compares the lookalike domain with the real one, and its result showing one swapped character and a similarity of 0.79.
Delivers the verdict and the file
ORIA's answer: credential phishing, an evidence table, three actions to take now, a one-page PDF incident note ready to download, a saved memory, and sources from CISA and NIST.

02ORIA Cyber

Paste hashes, URLs, domains or IPs, or ask in chat. ORIA Cyber checks them against VirusTotal, opens sandbox behaviour and relationships, and keeps every lookup on a timeline.

Six indicators, triaged at once
ORIA Cyber Investigations: six indicators pasted in, five returned malicious and one with no detections, with totals for investigated, malicious, suspicious and no-detection results.
Verdict
A malicious file's detection summary: 41 of 69 engines, with data freshness and community comments.
Sandbox behaviour
The sample's process tree from provider sandboxes: the payload starts cmd.exe, PowerShell and a scheduled task.
Relationships
A relationship graph linking the sample to dropped files, contacted domains and contacted IP addresses.

Screenshots use VirusTotal demo fixtures, marked as demo data in the product. A live deployment uses your own VirusTotal key.

03Toolkit

Switch tools on or off per conversation. ORIA picks the ones a task needs.

01

Research with sources

Live web and X search, page reading, and multi-agent research where several agents search at once.

  • Citations on every answer
  • Domain and date filters
02

Python on the evidence

Writes and runs code for maths, parsing and data, and shows you the code and its output.

  • Logs, CSVs and JSON
  • Charts and calculations
03

Finished documents

Builds Word, PowerPoint, PDF and Excel files, illustrated on request, ready to download.

  • Incident notes and reports
  • Decks and spreadsheets
04

Memory and skills

Remembers what you ask it to keep, and loads your instruction packs when a task calls for them.

  • Facts you can review and delete
  • Skills that apply automatically
05

Live voice

Talk to ORIA and hear it answer, with the same tools available while you speak.

  • Hands-free triage
  • A transcript of every turn
06

Works in your browser

In the NSWEB browser, ORIA reads pages, compares tabs and helps fill forms, and asks before anything sensitive.

  • Never passwords or payment
  • Your approval on each step that matters

04Applications

Small and mid-sized businesses first, and the defense and finance teams NET4NINJA already works with.

01

Cybersecurity for small businesses

Threat detection and response for teams without a security operations centre of their own.

02

Financial intelligence

Fraud detection and market analysis for fintech firms and other high-stakes financial work.

03

Defense contractors

Decision support and IT assistance for contractors who need discretion and a clear audit trail.

05The name

Each letter is a stage ORIA runs through on every request, in this order.

O

Observation

Reads the network, the tickets, and the question you ask, as they arrive.

R

Reasoning

Works out what the signals mean and what an attacker or a user is likely to do next.

I

Implementation

Drafts the fix, the script, or the reply, ready for a person to approve.

A

Analysis

Reports what happened and why, in language a non-specialist can act on.

06Open ORIA

ORIA is open to invited users. If your account has access, open the chat. If you need access, write to us and we will set you up.

Open ORIA Email us