A field guide

Your website is a beacon.

Every website quietly broadcasts how healthy a business is, and how closely someone is watching over it. Attackers have learned to listen for that signal. We listen first.

Read at your own pace, expand a section below.

Every website signals who's paying attention

Think of your site as a porch light. It's always on, and anyone walking past can see it. That's the point, it's how customers find you.

But the way a site is run says more than most owners realize. To the right kind of stranger, it tells how closely you guard the doors. A well-tended site looks like a house with the lights on, a car in the drive, and someone clearly home. A neglected one looks like nobody's checked the locks in a while.

Owners almost never see this signal. Attackers do. They use it to sort the whole internet into two piles: "well-guarded, skip it" and "not watching, worth a try."

You don't choose to send the signal. You can't switch it off. Your site broadcasts it twenty-four hours a day, to anyone who cares to read it.

Always on

Your site never closes. The signal is out there every hour of every day, whether or not you're at the desk.

Readable by anyone

It's public by design. No break-in required to read it, a curious stranger sees the same thing your customers do.

Sorts targets for attackers

The signal is exactly what they use to decide who's an easy mark and who's not worth the effort.

Now attackers read the beacon with AI, at machine speed

Reading the signal used to be slow work. A skilled person spent hours studying one business to decide whether it was worth attacking. That effort was its own kind of protection, most small businesses simply weren't worth anyone's time.

AI changed the math. It does the same reading in seconds, across thousands of businesses at once. No patience required, no skill to run out of. Here's how it works.

  1. 1

    Spot

    The AI sweeps across the web and flags businesses whose signal says "not watching." It doesn't get tired and it doesn't skip anyone, small shops included.

  2. 2

    Plan & build

    It turns those weak signals into a step-by-step attack plan, then writes the software to carry it out. The part that used to need an expert is now automatic.

  3. 3

    Strike

    It runs on its own. Stolen data, fraud, ransom demands, someone impersonating your business, the damage often starts before anyone notices anything is wrong.

The barrier to attacking a small business has never been lower.

We get there first, with Agentic AI on your side

So we built the same kind of AI the attackers use, and pointed it the other way, at protecting the businesses around us.

Our agents work on their own. They find local businesses, read each site's beacon the way an attacker would, and weigh one simple question: could someone break in here, or not?

When the answer is "yes, and easily," you hear it from us, privately, in plain English, before an attacker gets the chance to act on the same thing.

Discovers automatically

The agents seek out local businesses on their own, the same way the attackers' tools do.

Reads the same signals

They look at exactly what an attacker would look at, only what your site already shows the public.

Judges: can this be broken into?

Every site gets weighed against one honest question, so the warning you get is the one that matters.

What we promise

Looking out for the neighborhood only works if it's done honestly. So here's where we draw the line, plainly.

  • We only read what's public

    We look at what your site already shows the world, nothing hidden, nothing private, nothing behind a login.

  • We never break anything

    We don't tamper, change, or knock anything over. Looking is all we do.

  • We tell you privately

    If we find something, you hear it directly and quietly. We never publish who's exposed or put anyone on a list.

  • We stop when you ask

    Tell us to stop and we stop, for good. No follow-up, no exceptions.

A local project

If our paths have crossed, say hello.

ApeCyber is a local field project about what AI changes for web security, written for the small businesses nearby, not for engineers. There's nothing to sign up for here. If you read something that landed, or you just want to talk it through, I'm around.

say hello