function goTo(id){const el=document.getElementById(id);if(el)window.scrollTo({top:el.getBoundingClientRect().top+window.scrollY-80,behavior:'smooth'});} function Nav({onContact}){ const {Button}=window.HelixCyberDesignSystem_c2a1e7; return ; } function Hero({onContact}){ const {Button}=window.HelixCyberDesignSystem_c2a1e7; const tag=t=>{t}; const check=t=>
✓{t}
; return
{tag('Security')}{tag('Enterprises')}

helixcyber

Reverse engineering, AI security, and agent audits for companies that run software agents — from firmware to model weights.

{tag('Firmware audits')}{tag('Agent policy')}{tag('RAG hardening')}{tag('Model supply chain')}
What you get
{check('Authorized reverse engineering')} {check('Model and agent audits')} {check('Evidence for SOC 2 / GDPR / PIPL')} {check('Reply in 7 business days if qualified')}
; } function Capabilities(){ const items=[ {id:'network-security',l:'/NETWORK-SECURITY',t:'Perimeter to payload',d:'Detection engineering, traffic analysis, and hardening for networks that carry machine-to-machine traffic.',b:['Detection engineering & SOC tuning','Protocol and traffic analysis','Perimeter hardening reviews']}, {id:'reverse-engineering',l:'/REVERSE-ENGINEERING',t:'Binary triage at depth',d:'Firmware, protocols, and closed-source dependencies taken apart before they ship into your stack.',b:['Firmware and binary audits','Proprietary protocol recovery','Third-party dependency vetting']}, {id:'ai-security',l:'/AI-SECURITY',t:'Model supply chain',d:'Provenance for weights and adapters, injection-resistance testing, and guardrail evaluation.',b:['Weight and adapter provenance','Prompt-injection resistance testing','Guardrail and policy evaluation']}, {id:'agents',l:'/AGENTS',t:'Agent recommendation',d:'Vetted agents and tool policies. We tell you which agents to trust, with what, and prove why.',b:['Agent capability audits','Tool-access policy design','Trust reports with evidence']}]; const {Card}=window.HelixCyberDesignSystem_c2a1e7; return
WHAT WE DO
{items.map(i=>
{i.d}
    {i.b.map(x=>
  • ↳{x}
    • )}
)}
; } function Approach(){ const steps=[['01','Map','We enumerate the surface: binaries, models, agents, and the traffic between them.'],['02','Break','We attack it the way an adversary would, and write down exactly what gave.'],['03','Hold','Continuous monitoring keeps the findings fixed. Regressions page us, not you.']]; return
HOW WE ENGAGE
{steps.map(([n,t,d])=>
{n}
{t}
{d}
)}
; } function Providers(){ const items=[ {logo:'assets/logos/anthropic.svg',alt:'Anthropic',name:'Anthropic',models:['Claude Opus 5','Claude Fable 5','Claude Fable 5.1']}, {logo:'assets/logos/openai.svg',alt:'OpenAI',name:'OpenAI',models:['GPT-5.6 Sol','gpt-daybreak-blue']}, {logo:'assets/logos/google.svg',alt:'Google',name:'Google',models:['Gemini']}, {logo:'assets/logos/aws.svg',alt:'Amazon Web Services',name:'AWS Bedrock',models:['Claude on Bedrock','Daybreak Blue','Llama / Titan']}, {logo:'assets/logos/xai.svg',alt:'xAI',name:'xAI',models:['Grok 4.6']} ]; return
MODELS WE RUN
Providers on the desk

Authorized enterprise work only. Which model we assign depends on the lane — general, Mythos fallback, or verified-defender. How we pick.

{items.map(p=>
{p.alt}/
{p.name}
    {p.models.map(m=>
  • ↳{m}
    • )}
)}
; } function Compliance(){ const regs=[ ['US','SOC 2','HIPAA','CMMC','Cyber insurance evidence'], ['EU','GDPR','NIS2','ISO 27001'], ['CN','PIPL','MLPS','DSL'], ['AI','ISO 42001','EU AI Act','model provenance'] ]; return
COMPLIANCE
Evidence mapped to the regimes you already report

We do not sell a certificate. We produce the technical evidence auditors, insurers, and security questionnaires ask for — access, model provenance, agent tool policy, backup of findings, incident notes.

{regs.map(([region,...pills])=>
{region}
{pills.map(p=>{p})}
)}
; } function Industries(){ const items=[['Healthcare','HIPAA-aware agent and PHI-adjacent systems'],['Finance','SOC 2 evidence, model and vendor reviews'],['Manufacturing','firmware, CMMC-aware binary supply chain'],['Software','agent harness, RAG, tool-policy audits'],['Defense / gov','closed-source and firmware under authorization']]; return
INDUSTRIES
Where downtime and model risk are the same problem
{items.map(([t,d],i)=>
{t}
{d}
)}
; } function Faq(){ const qa=[ ['What does HelixCyber do?','Enterprise reverse engineering, AI security, agent audits, RAG hardening, and detection engineering for companies that run software agents.'], ['Which models do you run?','Anthropic (Opus 5, Fable 5/5.1), OpenAI (GPT-5.6 Sol, gpt-daybreak-blue), Google Gemini, AWS Bedrock, and xAI Grok 4.6. Assignment depends on the lane.'], ['Can you help with HIPAA, CMMC, SOC 2, GDPR, or PIPL?','We produce technical evidence those reviews ask for: access, model provenance, tool policy, findings, and recovery notes. We are not your auditor of record.'], ['Do you replace internal IT?','No. We sit on the security and reverse-engineering work. Internal IT keeps tickets and identity. We can co-run with a security team.'], ['How do we start?','Request a briefing. We map binaries, models, and agents, then propose an audit, red team, or retainer. Qualified inquiries receive a reply within seven business days to confirm next steps.'] ]; return
FAQ
Common questions
{qa.map(([q,a])=>

{q}

{a}

)}
; } function Footer({onContact}){ const {Button}=window.HelixCyberDesignSystem_c2a1e7; return ; } Object.assign(window,{Nav,Hero,Capabilities,Approach,Providers,Compliance,Industries,Faq,Footer});