Who we serve
Five nonprofit sectors where a wrong security decision is costly and a slow one is worse.
Each profile below reaches ArtOfTheHack through a different pressure, but the structural requirement is the same: evidence with provenance, alternatives that survive review, explicit authority, and a reversal path recorded before the action.
Initial profiles
Where the first workflows live
These are the environments where the highest-value first workflow is easiest to identify and measure. Every profile page names the workflows, the systems involved, and the authority model that governs them.
Grantee profile 01
Human rights and humanitarian NGOs
Human rights and humanitarian organizations are targeted by well-resourced adversaries while running lean IT teams and donated tooling. The KRYOS-XS overlay adjudicates the evidence those tools already produce and returns a governed decision that names the risk to people, not only to devices.
- Phishing and targeted-message adjudication for staff and partners
- Suspicious sign-in and impossible-travel decisions for field accounts
- Device compromise triage for travelling staff
Grantee profile 02
Public policy think tanks
Think tanks hold pre-publication research, donor relationships, and government contacts that adversaries want early. The overlay correlates identity, email, and cloud evidence into one decision layer so a small operations team can act with the confidence of a much larger security function.
- Credential-phishing adjudication for fellows and scholars
- Unmanaged and personal-device access decisions
- Pre-publication document access review
Grantee profile 03
Nonprofit research institutes
Nonprofit research institutes run instrument networks, shared compute, and external collaborations that sit outside normal organization controls. The overlay reasons across those environments together instead of leaving each one to its own console.
- External collaborator access review and revocation
- Credential exposure in code repositories and notebooks
- Instrument and laboratory network anomaly adjudication
Grantee profile 04
Foundations and grantmakers
A foundation's grantee list is a target map. Payment workflows, board correspondence, and grantee records need governed decisions with named human authority, and the overlay provides them without changing a single existing system.
- Payment and disbursement change-request adjudication
- Business email compromise and impersonation triage
- Grantee record access review
Grantee profile 05
Civil society and journalism support organizations
Nonprofit newsrooms, press-freedom organizations, and civil society networks operate under surveillance pressure with volunteer-scale infrastructure. The overlay turns scattered signals into a governed decision that accounts for what happens to a source if the response is wrong.
- Targeted-message and spyware indicator adjudication
- Contributor and volunteer access decisions
- Compromised-device triage for reporters in the field
Shared requirement
What every profile needs from the decision layer
- Evidence that retains provenance, freshness, and independence
- Contradictions surfaced rather than averaged away
- Alternative hypotheses retained in the record
- Explicit authority before an action is prepared
- Uncertainty carried through to the point of decision
- A rollback plan defined before execution, not after failure
- Replay of the exact policy and model state in force at the time
- A record that outlives the people who produced it