Home / Products

Malaysian-built platforms for security and data

Two Abyres products, built in Malaysia and deployed on your own infrastructure: iNFRAlens for security and operational assurance, and Elixier for data and AI.

iNFRAlens Elixier

Agentic AI Assurance Platform

iNFRAlens

One platform, one outcome: continuous proof of your security posture, from the attack paths an adversary would exploit to the configuration weaknesses in every server, database and application.

Operators give instructions in plain English. The AI core works out the intent and runs industry-standard tools across security and operational domains, with no command line, scripts or specialist tooling knowledge needed. Every action is scoped, approved, logged and reportable.

21+ security domains
2 lenses, one source of truth
CIS · ISO 27001 aligned
NACSA · NCSB · PDPA mapped

Engineer running an iNFRAlens assessment

The challenge

Fragmented tools

Security and infrastructure health sit in separate tools, with no single view of risk across the attack surface.

Expertise barriers

Advanced offensive security needs deep command-line skills most organisations don’t have in-house.

Visibility gaps

Offensive testing and operational reviews run in silos, and threats hide in the space between the two teams.

Lens S

Security Intelligence

AI-orchestrated offensive security across the full attack lifecycle, from reconnaissance to reporting, driven in plain English.

Natural language execution. Describe the task; iNFRAlens picks and runs the right security tool.
Executes, not just advises. Runs reconnaissance, exploitation, post-exploitation and reporting end to end.
Session-based audit logging. Every command captured with timestamps, ready for compliance review and legal evidence.
Automated reports. Findings exported to PDF, HTML and Markdown, ready for management or regulators.

Coverage: 21+ security domains in one interface

ReconnaissanceExploitationPost-exploitationWeb applicationAPI securityVoIP testingPost-quantum cryptographySteganographyPassword attacksPrivilege escalationLateral movementActive DirectoryContainer securityCloud attack surfaceEvasion techniquesSocial engineeringOSINTNetwork scanningWiFi & wirelessDisk forensics & IRReporting & evidence

Highlighted domains are rare in the market and need the iNFRAlens hardware appliance.

Example

Operator: “Map the external attack surface for the DMZ and flag exploitable services.”
iNFRAlens: runs reconnaissance and network scanning, validates which services are genuinely exploitable, and produces a severity-rated report with every command timestamped.

Lens O

Operational Health

Health, performance and configuration assessment across the servers, databases and applications that keep your organisation running.

Server assessment

OS health and patch posture, CIS hardening gaps, privileges, accounts and resource health.

Database assessment

Authentication and role hygiene, encryption at rest and in transit, risky configurations and audit-logging gaps.

Application assessment

Configuration and debug hygiene, API surface and rate limiting, dependency CVEs and session risk.

Performance management

OS & server. CPU, memory and I/O utilisation, load and process health, with capacity-trend alerts.
Database. Slow-query and lock analysis, index efficiency, connection-pool and cache hit rates, storage growth.
Application. Response time, throughput, error rates and latency percentiles, API bottlenecks and resource leaks.
Output. Baselined metrics, trend lines and threshold alerts that surface bottlenecks before they become outages.

Example

Operator: “Assess the production database cluster and flag anything that fails our hardening baseline.”
iNFRAlens: checks authentication and encryption, compares the configuration with CIS benchmarks and outputs severity-rated fixes mapped to CIS and ISO 27001.

How it works

Plain English input from the operator, with no CLI or scripts.
AI interprets intent and plans the engagement.
Tools execute security tests or health checks, all session-logged.
Evidence and reports are generated automatically.

You stay in control

Scoped authorisation: tests run only on approved targets and time windows.
Human in the loop: high-impact actions pause for operator approval.
Full audit trail: tamper-evident record of every command and result.
Self-hosted: data never leaves your network; stop any engagement at any time.

Deployment

Delivered as a physical or virtual appliance on your premises. Run it fully air-gapped, or cloud-connected with the AI model hosted at the Abyres Data Centre in Malaysia, keeping sensitive assessment data in your own environment.

Deliverables

Management-ready PDF/DOCX reports, interactive HTML findings, and Markdown for DevSecOps pipelines. Every report includes per-finding severity (Critical, High, Medium, Low), remediation guidance, PDPA and ISO 27001 readiness indicators, and the full session audit trail.

Post-Quantum Cryptography readiness

Aligned with Malaysia’s National Post-Quantum Cryptography Migration Plan 2025–2030 and the Malaysia Cyber Security Strategy 2025–2030, helping agencies and critical sectors start their quantum-safe migration now.

“Harvest now, decrypt later” attacks target today’s encrypted data. iNFRAlens discovers cryptographic assets across networks, endpoints and cloud, maps TLS, certificates and keys, scores quantum exposure by asset, and builds a migration roadmap aligned to NIST ML-KEM, ML-DSA and SLH-DSA.

In the field

Public listed company · Brute-force incident

48h

from detection to containment after 18 Linux accounts were compromised through SSH brute force; 6 attack vectors identified and hardened.

Public sector · CMS compromise

72h

from detection to remediation: 31 vulnerabilities and 9 malicious webshells and backdoors found, the CMS rebuilt with file integrity monitoring.

Public sector agency · Posture assessment

3 days

to deliver a prioritised remediation roadmap aligned to NACSA, after assessing 86 security controls and identifying 34 risk gaps.

Book an iNFRAlens assessment

Data Platform + AI Agent

Elixier

One trusted view across every department and agency you oversee, and the ability to ask it questions in plain language, without touching the systems that run the business.

Elixier joins data from many systems into one certified set of numbers. Elixier AI+, the agent at the end of the line, turns that data into dashboards and answers in plain language. Management asks the question; the agent writes the query, builds the dashboard and checks it.

Built in Malaysia
On-premise, data never leaves
No per-user fee to share results

Elixier business intelligence dashboards

One view, many sources

Excel, databases and SaaS exports joined into one certified set of numbers everyone agrees on.

Ask, don’t build

Management asks; the agent writes the query, builds the dashboard and checks it. Half an hour, not days.

Consistent and repeatable

Configured once, so the same question gives the same answer next month, for the next person.

Safe and sovereign

Production systems untouched, shared data in a controlled layer, and the AI model running on-premise.

How Elixier works: a data factory

Raw data comes in from many systems, is refined in stages, and leaves as certified data the business can use directly.

SourcesMany systems

Finance spreadsheets, licensing databases, HR timesheets, claim forms, helpdesk exports.

BronzeLanded as-is

A straight copy of each source, kept off the live system.

SilverCleansed and unified

Duplicates removed, formats aligned, one name for the same thing across systems.

GoldCertified and ready

Query-ready records. The only layer users and the AI ever touch.

Elixier AI+Dashboards and answers

The agent writes the queries, builds and tests the dashboard, and answers in plain language.

The platform ingests, cleanses, stores and schedules the daily or monthly refresh. Elixier AI+ does not replace it; it asks questions of the gold data.

Configured once, trusted every time

	Generic AI dashboard	Elixier AI+
Setting up the data	Explain the file and its terms every time	Business definitions configured once
Next month’s report	Prompt again; results vary	Same question, same answer
Sharing	Lives in one person’s chat	Shareable, role-based views
Guardrails	Whatever the model shows	What the agent may see, hide or refuse is set by you

It checks its own work

Elixier AI+ never hands over its first attempt. Before anything is shown, the agent works through a quality checklist:

Is there already a proven query for this question?
Which table holds the data, and does this user have rights to it?
Is the query optimised, or will it strain the system?
Does the dataset come back as expected?
Does the dashboard render properly, including on mobile?

~30 minutes for a dashboard that takes a team two to three days with a conventional licensed tool, as seen in a live demo.

When you need Elixier

Multiple data sources

Finance in Excel, another department on a database, a third on a SaaS tool, and nothing joins them.

Production can’t take the load

Heavy reporting slows the live system. Elixier is the middle layer that absorbs it.

The source is sensitive

Outsiders can’t enter the live system, yet the data must be shared. The shared copy lives in Elixier.

It happens every month

A recurring cycle of collect, cleanse and publish is exactly what Elixier automates.

Use cases

State government & local authorities

Where the revenue comes from, and where it goes

Councils each run their own assessment, licensing and enforcement systems. Elixier builds one state-level view that each council feeds on a schedule, while every council keeps its own system untouched and sees only its own slice.

Leaders ask:

Collection rate and arrears by council and zone, against last year
Licences issued, renewed and lapsed, and the revenue in lapsed licences
Building-plan approval turnaround against the state KPI

Higher education

One view of students, money and staff

Student, finance, HR, research grant and facilities data live in separate systems. Elixier refreshes them monthly into one gold layer, generates ministry reports on demand, and lets deans ask their own questions without touching the finance system.

Leaders ask:

Cost per graduate by faculty, and programmes below break-even enrolment
Grant utilisation by project against deadlines
Student attrition risk from attendance, fee arrears and results

Telco & banking

Heavy data, many systems, production that can’t be touched

Millions of records across billing, CRM, network or core banking, and regulators who want reports on a fixed cycle. Elixier runs as reporting middleware off the production path, with an on-premise model so customer data never leaves.

Leaders ask:

Churn and revenue per customer by region and channel
Branch and product profitability, and loan approval turnaround
Regulatory returns drafted from gold data, with the same figures every time

Multi-outlet retail

What sold where, and why

Hundreds of outlets, tens of thousands of SKUs and millions of POS lines a month. Elixier loads POS and ERP nightly into one set of numbers for merchandising, finance and operations, and regional managers ask about their own stores from a phone.

Leaders ask:

Sales per square foot and margin by outlet, region and format
Stock-outs in top outlets while the same SKUs sit unsold elsewhere
Whether a promotion lifted margin or only volume

What you get

Elixier data platform: ingestion, cleansing, storage and scheduling
Elixier AI+ agent, pre-configured with your business definitions and guardrails
A tested AI model that can run fully on-premise
Professional services to set up data definitions and dashboards

Common questions

Can’t a chatbot build me a dashboard for free?: For one file, once. Next month you explain the file again and get a different answer. Elixier gives the same answer to everyone, every month, and nothing leaves your premises.
We already have Power BI.: Keep it. Elixier joins the sources behind it and lets management ask the next question without waiting for the data team.
We won’t let anyone into our system.: We don’t go in. A copy lands in Elixier, the live system is never queried, and you decide what the agent may see or hide.

Request an Elixier demo