# Protos Labs

> Protos Labs builds agentic AI technology for autonomous cyber threat management. Their flagship product, Protos AI, acts as a daily AI threat intelligence analyst — automatically monitoring, investigating, and reporting on threats relevant to a user's organization.

Protos Labs is headquartered in Singapore (JTC Launchpad, 75 Ayer Rajah Crescent) with an additional office in Sydney, Australia. The company serves MSSPs, SOC teams, IR consultancies, cyber insurance teams, and defense/intelligence agencies.

## Product: Protos AI

Protos AI is an agentic AI platform that automates the work of a junior Cyber Threat Intelligence (CTI) analyst. It delivers value in two modes:

- **Passive (Retention):** Automatic Daily Threat Brief — a consolidated, analyst-written report covering top threats relevant to the user's organization, including why they matter, related campaigns/actors, supporting sources, and recommended actions.
- **Active (Engagement):** Ad-hoc Investigations — on-demand OSINT-based investigations into threat actors, indicators (IP/domain/hash), and organization exposure.

Every investigation produces a shareable report containing: executive summary, relevance explanation, findings, sources, and recommended actions. Reports support PDF export.

## Protos AI Freemium

Protos AI Freemium is a self-service tier designed to give CTI analysts immediate access to an AI analyst without sales friction. It is not a locked-down demo — it is a fully functional daily threat intelligence product with usage limits.

**Target users:**
- CTI analysts and threat hunters
- MSSP security teams
- Small SOC teams
- IR consultancies
- Cyber insurance security teams

**Core problem solved:** Too much generic intelligence, not enough organizational relevance. Users currently read blogs manually, search indicators individually, and track threats in spreadsheets without contextual prioritization.

**Freemium includes:**
- Daily Threat Brief (automatic, delivered within 1 hour of onboarding)
- Limited ad-hoc investigations per month (action-limited; usage shown as percentages, not raw token counts)
- Prompt Library (default prompts, editable, saveable by user)
- PDF report export

**Freemium does NOT include:**
- TAXII feeds
- SIEM ingestion
- EDR integrations
- Paid intelligence feeds
- Vulnerability scanning
- Collaboration features
- Enterprise dashboards
- Custom automation

**User journey:**
1. Sign up (account registration)
2. Manual vetting (approval to prevent abuse)
3. Organization onboarding (provide industry, HQ country, digital presence, key platforms, tech stack)
4. Automatic first value: Daily Threat Brief delivered within 1 hour
5. Active use: run ad-hoc investigations
6. Output: export and share investigation reports

## Paid / Enterprise (Protos AI Full Platform)

Upgrading from Freemium unlocks:
- Higher volume investigations
- Integrations (SIEM, EDR, TAXII)
- Private data ingestion
- Organizational deployment

**Positioning:** Freemium = AI Analyst. Paid = Intelligence Platform.

## Key Performance Claims

- 15x faster mean time to investigate (8 hours → 30 minutes)
- 30–40% reduction in total cost of ownership
- 80% improvement in tool utilization
- 50% improvement in data analyzed vs. collected

## Supported Use Cases

**Cyber / Security:**
- TTP Analysis & IOC Enrichment
- Supply Chain Intelligence monitoring
- Advisory to Exposure Mapping (CVE identification)
- Retrospective Hunt (log analysis for IOCs)
- Attack Campaign Identification
- Timeline Reconstruction across security tools
- Threat Actor investigation
- Indicator investigation (IP / domain / hash)
- Organization exposure investigation

**Non-Cyber (Enterprise):**
- Cyber Insurance underwriting and portfolio exposure analysis
- Financial Crime transaction monitoring and fraud pattern detection
- Trade Compliance (sanctions and export control)
- KYC customer due diligence

## Technical Architecture

- **Tool agnostic:** Correlates across multiple data sources and feeds
- **Model agnostic:** Not locked into a single AI model
- **Data format agnostic:** Handles APIs, STIX/TAXII, JSON, PDFs, unstructured data
- **Deployment options:** Cloud, on-premise, or hybrid
- **OSINT-only for Freemium:** No integrations required at the free tier
- **Usage metering:** Token-metered internally; action-limited externally

## Company

- **Website:** https://protoslabs.io
- **HQ:** Singapore — JTC Launchpad, 75 Ayer Rajah Crescent
- **Office:** Sydney, Australia
- **Social:** LinkedIn, X (Twitter), YouTube
- **Contact/Demo:** Inquiry-based; no public pricing listed
- **Battle-tested by:** Defense and intelligence agencies