Welcome to Arkhein
Arkhein is a multi-cloud CNAPP (Cloud-Native Application Protection Platform) that unifies posture management, threat detection, entitlement analysis, and attack-path reasoning across AWS, OCI, GCP, and Azure — modeled as a single security graph.
Unlike tools that present findings as flat lists, Arkhein stores every cloud resource, identity, finding, and relationship in a graph database (Neo4j). This lets you answer questions a list never could: "which internet-facing resource can reach my crown-jewel database, and through which identity?"
What Arkhein does
| Capability | What it covers |
|---|---|
| CSPM | Cloud Security Posture Management — misconfigurations & compliance across all four clouds (powered by Prowler) |
| Attack Paths / Ghost Mode | Graph-based reasoning that traces real exploit chains from an entry point to a crown jewel |
| CIEM | Cloud Infrastructure Entitlement Management — over-privileged identities, roles, and escalation paths |
| CDR / SIEM | Cloud Detection & Response over your event stream |
| DSPM | Data Security Posture Management — where sensitive data lives and how exposed it is |
| Exposure Score | A proactive, prioritized measure of your externally-reachable attack surface |
| Container & Kubernetes security | Image vulnerabilities and workload posture, including Serverless Functions |
How it fits together
Your cloud accounts ──▶ Arkhein scanners (read-only) ──▶ Neo4j security graph ──▶ Dashboard
(AWS/OCI/GCP/Azure) Prowler + Go collectors findings · paths · CIEM
Arkhein connects to your accounts with read-only credentials. It never modifies your infrastructure — remediation is guided (you apply the fix, or use the automation script we provide).
Where to start
- Connect your first account — a 5-minute setup for any provider.
- Provider setup guides — exact steps for AWS, OCI, GCP, and Azure.
- Concepts — understand attack paths, CIEM, and the exposure score.
- API reference — automate everything Arkhein does.
Arkhein is delivered through a guided onboarding. To evaluate the platform, book a demo and our team will provision your workspace.