# Abet

*/Startups/Abet*

## Startup Overview

This automated red-team agent continuously probes web applications and API endpoints for vulnerabilities. Instead of running passive scans, the system executes safe exploit chains against live environments and generates reproducible proof-of-concept scripts for security teams.

Digital enterprises require continuous red teaming to expose defensive gaps before external threat actors find them. Waiting for periodic manual assessments leaves windows of exposure open between test cycles. This continuous testing agent removes those blind spots by maintaining a persistent, active attack posture across the entire application perimeter.

Alternatives like Cobalt, HackerOne, and Qualys depend on point-in-time manual testing or produce long lists of theoretical vulnerability alerts. This system separates itself through high execution frequency and strict exploit validation. By running continuous active exploit chains and delivering validated proof-of-concept scripts, it forces remediation based on proven exploits rather than theoretical risk scores.

## Startup Founding Hypothesis

**Approach**: that correlates device telemetry with in-game betting patterns
**Competitors**:
- [GeoComply](/Competitors/GeoComply)
- [Sift](/Competitors/Sift)
- [legacy rules engines](/Competitors/legacy_rules_engines)
**Differentiator2x2**: outcome-priced and strictly deterministic in its device fingerprinting

## Startup Solution Coordinate

**Solution**: [Abet Red Team Agent](/Agents/Abet_Red_Team_Agent)

## Startup Position2x2

```mermaid
quadrantChart
    title Red Teaming Execution & Validation
    x-axis Periodic Testing --> Continuous Execution
    y-axis Theoretical Alerts --> Validated PoC Scripts
    quadrant-1 Continuous Validated PoCs
    quadrant-2 Theoretical Continuous Scans
    quadrant-3 Periodic Vulnerability Scans
    quadrant-4 Periodic Validated Exploits
    Cobalt Pentesting: [0.2, 0.8]
    Manual Bug Bounty Programs: [0.4, 0.7]
    HackerOne: [0.65, 0.85]
    Qualys Vulnerability Management: [0.85, 0.25]
    Abet: [0.9, 0.95]
```

## Startup Customer Journey

```mermaid
flowchart LR;A[Zero-Day PoC Post]-->B[Single API Sandbox];B-->C[Working Python Exploit];C-->D[Departmental Red Team];D-->E[Global Perimeter Asset];E-->F[SOC Agent Integration];
```

## Startup Proof Points

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Pilot Goals**:
- A 30-day shadow-mode deployment processing parallel telemetry during a major sporting event, aiming to prove sub-50ms latency and identify fraudulent transactions missed by the existing rules engine.
- A 60-day sandbox integration testing up to 10,000 monthly events, targeting the complete isolation and deterministic flagging of emulator-based account creation attempts before production rollout.
**Target Metrics**:
- Target: 40 percent reduction in false-positive lockouts on high-frequency in-play bettors compared to legacy rules engines.
- Aim: 99.9 percent deterministic block rate of known iOS and Android emulator farms prior to first deposit clearance.
- Target: Sub-50ms API latency maintained for real-time telemetry correlation during peak betting load events.
**Target Case Studies**:
- A mid-tier mobile sportsbook validates the API by blocking iOS and Android emulator farms before initial deposits clear, eliminating promotional bonus abuse without disrupting legitimate user sign-ups.
- An enterprise casino operator documents a reduction in false-positive lockouts for VIP power users during high-velocity in-play betting, directly preventing lost handle during major sporting events.
- A regional daily fantasy sports provider deploys the sub-2MB SDK to intercept behavioral spoofing that bypasses standard geolocation checks, proving zero negative impact on user device battery life.
**Testimonial Targets**:
- Head of Fraud and Risk: Confirmation that the API successfully catches hardware-level spoofing that standard compliance tools miss.
- Lead Mobile App Developer: Relief that the SDK integration was seamless, kept app payload under 2MB, and completely avoided background battery drain.
- VP of Sportsbook Operations: Satisfaction that correlating device state with betting velocity correctly distinguished and protected legitimate VIP power users from accidental bans.

## Startup Top Risks

**Risks**:
- Severity: existential · Description: The automated agent inadvertently causes production downtime or data corruption while executing an active exploit chain. · Mitigation Status: in-progress
- Severity: high · Description: Enterprise security and compliance teams refuse to authorize an autonomous system to run live exploits against their infrastructure. · Mitigation Status: unmitigated
- Severity: moderate · Description: Major cloud infrastructure providers flag and block the continuous probing traffic as hostile malicious activity. · Mitigation Status: in-progress
- Severity: moderate · Description: The exploit engine fails to identify complex business logic flaws that human bug bounty hunters routinely discover. · Mitigation Status: unmitigated

## Startup Competitors

- [Cobalt Pentesting](/Competitors/Cobalt_Pentesting) — PTaaS Provider
- [Manual Bug Bounty Programs](/Competitors/Manual_Bug_Bounty_Programs) — Status Quo
- [HackerOne](/Competitors/HackerOne) — Crowdsourced Security
- [Qualys Vulnerability Management](/Competitors/Qualys_Vulnerability_Management) — Incumbent Scanner
- [Detectify DAST](/Competitors/Detectify_DAST) — Automated Vulnerability Scanner
- [Tenable Nessus](/Competitors/Tenable_Nessus) — Legacy Enterprise Scanner

## Startup Business Definition

**Name**: Execute Continuous Red Teaming for Digital Enterprises
**Layers**:
- **Thesis**: Agent
- **Template**: single-product-saas
- **Buyer Chain**: B2B -> Security Engineer -> CISO sign-off
**Vision**:
- **Vision**: Digital Enterprises no longer carry the cost of execute continuous red teaming; the work runs reliably in the background, and the team that used to do it is free for higher-leverage work in digital enterprise.
- **Mission**: act as the digital employee that handles execute continuous red teaming for Digital Enterprises.
**Industry**: Digital Enterprise
**Coord Href**: /Startups/Abet
**Processes**:
- Name: Customer Intake · Owner: startup-cs-onboarding · Category: core · Description: Capture a new customer's signup or sales hand-off and route them into onboarding. · Added By Layer: operate-baseline
- Name: Agent Work Loop · Owner: delivery-primary-agent · Category: core · Description: The Primary Agent runs its day-to-day work loop; the Supervisor reviews exception cases. · Added By Layer: thesis
**Workflows**:
- Name: On New Customer Signup · Description: Event-driven: a new customer signs up → kick off onboarding + record the founding-OKR KR event. · Added By Layer: operate-baseline
- Name: Daily Agent Run · Description: Scheduled daily run of the Primary Agent's standing workload. · Added By Layer: thesis
**Departments**:
- Id: delivery-agent · Code: DEL · Name: Delivery (Agent) · Description: Delivery primitives for an Agent Thesis (ADR 0034 §3) — the Agent is the buyer-facing Worker, supervised by an agent supervisor that tunes it against measured outcomes. · Added By Layer: thesis
- Id: startup-operate · Code: OPS-S · Name: Operate (Startup-specific shared services) · Description: Per-Startup operate functions — Customer Success, Marketing, Revenue/Sales, Customer Ops. The Studio default carries portfolio-wide bookkeeping/AP/AR/tax/legal-prep (#239); this overlay adds the Startup-specific operate Positions that have to exist in every operating company. The four-layer specialization (Thesis/Template/spine/Buyer-Chain) then shapes these seats to the Startup's actual shape — additions/overrides happen in those layers, not here. · Added By Layer: operate-baseline
**Description**: An operating company whose buyer-facing product is an Agent that handles execute continuous red teaming for digital enterprises.
**Founding Okr**:
- **Period**: First 90 days
- **Objective**: Prove the wedge — first digital enterprises pay for execute continuous red teaming solved.
- **Description**: The founding OKR — every key result is a concept-stage TARGET (no operating history claimed), aimed at validating the Founding Hypothesis against the assigned wedge.
**Generated By**:
- **Generator**: C1
- **Generator Version**: 1.0.0
**Inherits From**:
- **Base**: STUDIO_DEFAULT_ORG
- **Version**: 1.0.0
- **Schema Version**: 2.1.4

## Startup Token Hero

**Genre**: founding-hypothesis
**Rendered**: What if you could stop emulator-based fraud at the first deposit? Abet correlates device telemetry with betting patterns to block bot-driven accounts deterministically.
**Mechanism**: spine-derived-v1
**Template Id**: spine-founding-hypothesis
**Vocab Fingerprint**: 1bbdde1a1e4134a7

## Startup Token Positioning

**Genre**: moore-positioning
**Rendered**: Fraud prevention for mobile sportsbooks for the fraud lead at high-volume gaming operators. Unlike legacy rules engines and GeoComply alone — block fraudulent transactions without affecting legitimate VIP player velocity.
**Mechanism**: spine-derived-v1
**Template Id**: spine-moore-positioning
**Vocab Fingerprint**: 19c8cc0d992e0f95

## Startup Token Pitch Deck

**Genre**: pitch-deck
**Rendered**: Problem: Reliance on GeoComply alone fails to catch iOS emulator farms that spoof device state during peak in-game betting windows.
Solution: What if you could stop emulator-based fraud at the first deposit? Abet correlates device telemetry with betting patterns to block bot-driven accounts deterministically.
Customer: the fraud lead at high-volume gaming operators
Unlike: legacy rules engines and GeoComply alone
**Mechanism**: spine-derived-v1
**Template Id**: spine-pitch-deck
**Vocab Fingerprint**: b7a93e537ebbfb5b

## Startup Token M E D D P I C C

**Pain**: Reliance on GeoComply alone fails to catch iOS emulator farms that spoof device state during peak in-game betting windows.
**Metrics**: Target: You maintain a clean player pool with 99.9% of emulator farms blocked and zero background battery drain.
**Rendered**: Pain: Reliance on GeoComply alone fails to catch iOS emulator farms that spoof device state during peak in-game betting windows.
Economic buyer: Sportsbook Operator
Metrics: Target: You maintain a clean player pool with 99.9% of emulator farms blocked and zero background battery drain.
Competition: legacy rules engines and GeoComply alone
**Mechanism**: spine-derived-v1
**Competition**: legacy rules engines and GeoComply alone
**Economic Buyer**: Sportsbook Operator
**Vocab Fingerprint**: ad95a7f42cbd8f99

## Startup Token Cold Email

**Genre**: cold-email
**Rendered**: Subject: Fraud prevention for mobile sportsbooks for the fraud lead at high-volume gaming operators

the fraud lead at high-volume gaming operators — Reliance on GeoComply alone fails to catch iOS emulator farms that spoof device state during peak in-game betting windows. What if you could stop emulator-based fraud at the first deposit? Abet correlates device telemetry with betting patterns to block bot-driven accounts deterministically.
**Mechanism**: spine-derived-v1
**Template Id**: spine-cold-email
**Vocab Fingerprint**: 13ca5102ad384fc5

## Startup Token Agent Spec

**Genre**: ai-agent-spec
**Rendered**: Fraud prevention for mobile sportsbooks. What if you could stop emulator-based fraud at the first deposit? Abet correlates device telemetry with betting patterns to block bot-driven accounts deterministically. Serves the fraud lead at high-volume gaming operators.
**Mechanism**: spine-derived-v1
**Template Id**: spine-ai-agent-spec
**Vocab Fingerprint**: da19d7296f441728

## Neighborhood

### Candidate solutions

- [Sync Multilingual Asset Updates](/Problems/Sync_Multilingual_Asset_Updates) — candidate solution for · Problems
- [Lead Time Forecasting](/Problems/Lead_Time_Forecasting) — candidate solution for · Problems
- [Senior Engineering Attrition](/Problems/Senior_Engineering_Attrition) — candidate solution for · Problems
- [Rejected Release Audits](/Problems/Rejected_Release_Audits) — candidate solution for · Problems
- [Standardizing High-Touch Experience](/Problems/Standardizing_High-Touch_Experience) — candidate solution for · Problems
- [Equip Technical Sales Engineers](/Problems/Equip_Technical_Sales_Engineers) — candidate solution for · Problems
- [Spot Freight Bidding](/Problems/Spot_Freight_Bidding) — candidate solution for · Problems
- [Perishable Inventory Spoilage](/Problems/Perishable_Inventory_Spoilage) — candidate solution for · Problems

### Positioned bets

- [High-Volume Automotive Die Casters](/CompanyTypes/High-Volume_Automotive_Die_Casters) — positioned bet · CompanyTypes

### Composed of

- [Alert Clearance Service](/Services/Alert_Clearance_Service) — composes · Services
- [Evidence Graph Agent](/Agents/Evidence_Graph_Agent) — composes · Agents
- [KYC Integration API](/Software/KYC_Integration_API) — composes · Software
- [Ledger Query API](/Software/Ledger_Query_API) — composes · Software
- [SAR Drafting Agent](/Agents/SAR_Drafting_Agent) — composes · Agents

### Competitors

- [Spreadsheet Reconciliation](/Competitors/Spreadsheet_Reconciliation) — competes with · Competitors
- [Tempo Timesheets](/Competitors/Tempo_Timesheets) — competes with · Competitors
- [Harvest](/Competitors/Harvest) — competes with · Competitors
- [Manual Sprint Tagging](/Competitors/Manual_Sprint_Tagging) — competes with · Competitors
- [Apptio Cost Analytics](/Competitors/Apptio_Cost_Analytics) — competes with · Competitors
- [Atlassian Jira](/Competitors/Atlassian_Jira) — competes with · Competitors
- [Manual Bug Bounty Programs](/Competitors/Manual_Bug_Bounty_Programs) — competes with · Competitors
- [Tenable Nessus](/Competitors/Tenable_Nessus) — competes with · Competitors
- [Detectify DAST](/Competitors/Detectify_DAST) — competes with · Competitors
- [Cobalt Pentesting](/Competitors/Cobalt_Pentesting) — competes with · Competitors
- [Qualys Vulnerability Management](/Competitors/Qualys_Vulnerability_Management) — competes with · Competitors
- [HackerOne](/Competitors/HackerOne) — competes with · Competitors
- [legacy rules engines](/Competitors/legacy_rules_engines) — competes with · Competitors
- [Sift](/Competitors/Sift) — competes with · Competitors
- [GeoComply](/Competitors/GeoComply) — competes with · Competitors
- [Sportradar Integrity Services](/Competitors/Sportradar_Integrity_Services) — competes with · Competitors
- [OneTrust Compliance Platform](/Competitors/OneTrust_Compliance_Platform) — competes with · Competitors
- [GeoComply Core](/Competitors/GeoComply_Core) — competes with · Competitors
- [In-House Legal Teams](/Competitors/In-House_Legal_Teams) — competes with · Competitors
- [Manual Legal Review](/Competitors/Manual_Legal_Review) — competes with · Competitors
- [Compliance Consultants](/Competitors/Compliance_Consultants) — competes with · Competitors
- [PerformLine](/Competitors/PerformLine) — competes with · Competitors
- [Manual Counsel Review](/Competitors/Manual_Counsel_Review) — competes with · Competitors
- [Everlaw](/Competitors/Everlaw) — competes with · Competitors
- [Relativity](/Competitors/Relativity) — competes with · Competitors
- [Manual Paralegal Review](/Competitors/Manual_Paralegal_Review) — competes with · Competitors
- [Jumio Identity Verification](/Competitors/Jumio_Identity_Verification) — competes with · Competitors
- [Manual Risk Analysts](/Competitors/Manual_Risk_Analysts) — competes with · Competitors
- [Legacy BPO Providers](/Competitors/Legacy_BPO_Providers) — competes with · Competitors
- [Cobalt](/Competitors/Cobalt) — competes with · Competitors
- [KnowBe4](/Competitors/KnowBe4) — competes with · Competitors
- [AttackIQ](/Competitors/AttackIQ) — competes with · Competitors
- [Manual Penetration Testing](/Competitors/Manual_Penetration_Testing) — competes with · Competitors
- [Manual Analyst Review](/Competitors/Manual_Analyst_Review) — competes with · Competitors
- [Nice Actimize](/Competitors/Nice_Actimize) — competes with · Competitors
- [Sardine](/Competitors/Sardine) — competes with · Competitors
- [Legacy Rule Engines](/Competitors/Legacy_Rule_Engines) — competes with · Competitors
- [Palantir Foundry](/Competitors/Palantir_Foundry) — competes with · Competitors
- [Manual Compliance Analysts](/Competitors/Manual_Compliance_Analysts) — competes with · Competitors
- [Actimize](/Competitors/Actimize) — competes with · Competitors
- [OneTrust](/Competitors/OneTrust) — competes with · Competitors
- [Logikcull](/Competitors/Logikcull) — competes with · Competitors
- [External Counsel](/Competitors/External_Counsel) — competes with · Competitors
- [Unit21](/Competitors/Unit21) — competes with · Competitors
- [Manual Case Reviews](/Competitors/Manual_Case_Reviews) — competes with · Competitors
- [Legacy GRC Platforms](/Competitors/Legacy_GRC_Platforms) — competes with · Competitors
- [Big Four Auditors](/Competitors/Big_Four_Auditors) — competes with · Competitors
- [Manual Analyst Triage](/Competitors/Manual_Analyst_Triage) — competes with · Competitors
- [Legacy Vulnerability Scanners](/Competitors/Legacy_Vulnerability_Scanners) — competes with · Competitors
- [Static Vulnerability Scanners](/Competitors/Static_Vulnerability_Scanners) — competes with · Competitors
- [Pen Testing Consultants](/Competitors/Pen_Testing_Consultants) — competes with · Competitors
- [Manual Red Teaming](/Competitors/Manual_Red_Teaming) — competes with · Competitors
- [Manual Alert Triage](/Competitors/Manual_Alert_Triage) — competes with · Competitors
- [ComplyAdvantage](/Competitors/ComplyAdvantage) — competes with · Competitors
- [Pentera](/Competitors/Pentera) — competes with · Competitors
- [Offshore BPO Investigators](/Competitors/Offshore_BPO_Investigators) — competes with · Competitors
- [Manual Review Workflows](/Competitors/Manual_Review_Workflows) — competes with · Competitors

### What it addresses

- [Execute Continuous Red Teaming](/Problems/Execute_Continuous_Red_Teaming) — addresses · Problems
- [Audit Marketing Materials](/Problems/Audit_Marketing_Materials) — addresses · Problems
- [Review Discovery Footage](/Problems/Review_Discovery_Footage) — addresses · Problems
- [Resolve KYC Exceptions](/Problems/Resolve_KYC_Exceptions) — addresses · Problems
- [Continuous Red Teaming](/Problems/Continuous_Red_Teaming) — addresses · Problems
- [Resolve AML Alert Backlogs](/Problems/Resolve_AML_Alert_Backlogs) — addresses · Problems
- [Clear AML Alerts](/Problems/Clear_AML_Alerts) — addresses · Problems
- [Verify Jurisdictional Compliance](/Problems/Verify_Jurisdictional_Compliance) — addresses · Problems
- [Fulfill Regulatory Data Requests](/Problems/Fulfill_Regulatory_Data_Requests) — addresses · Problems
- [Investigate Suspicious Activity Reports](/Problems/Investigate_Suspicious_Activity_Reports) — addresses · Problems
- [Automate Regulatory Audits](/Problems/Automate_Regulatory_Audits) — addresses · Problems
- [Triage Fraud Alerts](/Problems/Triage_Fraud_Alerts) — addresses · Problems
- [Continuous AI Red Teaming](/Problems/Continuous_AI_Red_Teaming) — addresses · Problems
- [Test LLM Guardrails](/Problems/Test_LLM_Guardrails) — addresses · Problems
- [Investigate Suspicious Activity Alerts](/Problems/Investigate_Suspicious_Activity_Alerts) — addresses · Problems
- [Continuous Penetration Testing](/Problems/Continuous_Penetration_Testing) — addresses · Problems
- [Regulatory Audit Response](/Problems/Regulatory_Audit_Response) — addresses · Problems
- [AML Alert Triage](/Problems/AML_Alert_Triage) — addresses · Problems

### Embodies

- [Agent](/Theses/Agent) — embodies · Theses
- [Service-as-Software](/Theses/Service-as-Software) — embodies · Theses
- [Headless SaaS](/Theses/Headless_SaaS) — embodies · Theses

### What it offers

- [Abet Commit Auditor](/Agents/Abet_Commit_Auditor) — offers · Agents
- [Abet Red Team Agent](/Agents/Abet_Red_Team_Agent) — offers · Agents
- [Resolution Loop](/Agents/Resolution_Loop) — offers · Agents
- [Alert Resolution Engine](/Agents/Alert_Resolution_Engine) — offers · Agents

### Who it serves

- [Digital Enterprise](/CompanyTypes/Digital_Enterprise) — serves · CompanyTypes
- [Fintech Startup](/CompanyTypes/Fintech_Startup) — serves · CompanyTypes
- [Criminal Defense Firm](/CompanyTypes/Criminal_Defense_Firm) — serves · CompanyTypes
- [Mid-Market Fintech](/CompanyTypes/Mid-Market_Fintech) — serves · CompanyTypes
- [Enterprise Security Team](/CompanyTypes/Enterprise_Security_Team) — serves · CompanyTypes
- [Fintech Operations Team](/CompanyTypes/Fintech_Operations_Team) — serves · CompanyTypes
- [Retail Bank](/CompanyTypes/Retail_Bank) — serves · CompanyTypes
- [Sports Betting Operator](/CompanyTypes/Sports_Betting_Operator) — serves · CompanyTypes
- [Mid-Market Fintechs](/CompanyTypes/Mid-Market_Fintechs) — serves · CompanyTypes
- [Fintech Compliance Team](/CompanyTypes/Fintech_Compliance_Team) — serves · CompanyTypes
- [Corporate Compliance Teams](/CompanyTypes/Corporate_Compliance_Teams) — serves · CompanyTypes
- [Fintech Compliance Desk](/CompanyTypes/Fintech_Compliance_Desk) — serves · CompanyTypes

### Entrant in opportunity

- [AI Audit Response for Compliance Teams](/Opportunities/AI_Audit_Response_for_Compliance_Teams) — is entrant in · Opportunities
- [AI Red Teaming for Security Teams](/Opportunities/AI_Red_Teaming_for_Security_Teams) — is entrant in · Opportunities

### Similar Startups

- [Warreal](/Startups/Warreal) — similar · Startups
- [Cascec](/Startups/Cascec) — similar · Startups
- [Zerodaycrest](/Startups/Zerodaycrest) — similar · Startups
- [Challengepoint](/Startups/Challengepoint) — similar · Startups
- [Forgouble](/Startups/Forgouble) — similar · Startups
- [Assurancetesting](/Startups/Assurancetesting) — similar · Startups
- [Coralagent](/Startups/Coralagent) — similar · Startups
- [Aislalibrate](/Startups/Aislalibrate) — similar · Startups
- [Guardiandeck](/Startups/Guardiandeck) — similar · Startups
- [Abrasiveridge](/Startups/Abrasiveridge) — similar · Startups
- [Defectivesocket](/Startups/Defectivesocket) — similar · Startups
- [Spot Strike Labs](/Startups/Spot_Strike_Labs) — similar · Startups
- [Patch](/Startups/Patch) — similar · Startups
- [Clarent](/Startups/Clarent) — similar · Startups
- [Domyn](/Startups/Domyn) — similar · Startups
- [Nocur](/Startups/Nocur) — similar · Startups
- [Astralpatch](/Startups/Astralpatch) — similar · Startups
- [Figis](/Occupations/Software_Developers/Problems/Software_Vulnerability_Remediation/Startups/Figis) — similar · Startups

### Similar Opportunities

- [Automated Pen Testing](/Skills/Programming/Opportunities/Automated_Pen_Testing) — similar · Opportunities