0.051 ms Layer-0 Filter
Evaluates 13 high-severity Sigma, WAF, and Mirage honey-credential rules in 0.051 ms P50 (0.071 ms P95), well inside our < 0.08 ms SLA.
0.051 ms P50 (< 0.08 ms SLA) Layer-0 signature & Mirage canary evaluation, 0.131 ms P50 / 0.191 ms P95 (< 5 ms SLA) Tier-0 on-host process micro-freeze, 14.35 ms P50 BETH eBPF Dual-Engine ML (99.74% accuracy), and 94.0% alert-fatigue reduction with 100.0% attack recall.
Every security event traverses our deterministic Tier-0 Rust sensor before reaching Layer-1 behavioral ML and Layer-2 multi-agent SOC reasoning.
Evaluates 13 high-severity Sigma, WAF, and Mirage honey-credential rules in 0.051 ms P50 (0.071 ms P95), well inside our < 0.08 ms SLA.
Suspends ransomware, credential dumpers, and reverse shells locally via Linux SIGSTOP and Windows NtSuspendProcess in 0.131 ms P50 / 0.191 ms P95.
Combines 0.42 ms Redis Lua risk decay and 14.35 ms P50 16-feature BETH eBPF ML inference with 5 specialized AI SOC agents and Autonomous Attacker Attribution.
Signs every containment action with RFC 8032 Ed25519 in 0.054 ms P50 and automates India CERT-In / DPDP and Australia ACSC / APRA evidence.
100% regional data residency with automated 6-hour CERT-In dossiers, 180-day tamper-evident retention, DPDP Act 2023 PII redaction, and ACSC Essential Eight / APRA CPS 234 / SOCI Act compliance packs—including a Free 30-Day Trial ($0 / ₹0 setup fee) for Australian & NZ enterprises.
Across every page on nikada.in, our engineering benchmarks follow one unified specification—separating sub-0.08-millisecond Layer-0 signature evaluation from sub-millisecond Tier-0 process suspension and Layer-1 eBPF behavioral ML inference.
| Pipeline Stage | Architectural Mechanism | Measured P50 | Measured P95 / P99 | SLA Target & Status |
|---|---|---|---|---|
| 1. Layer-0 Deterministic & Mirage Canary Filter | Pre-compiled regex & O(1) honey-token lookup across 13 high-severity EDR, WAF & Canary rules | 0.051 ms (0.0514 ms) |
0.071 ms P95 / 0.091 ms P99 | < 0.08 ms · PASS |
| 2. Tier-0 Local Kernel Micro-Freeze | On-host process suspension via Linux SIGSTOP and Windows NtSuspendProcess before network egress |
0.131 ms (0.131 ms P50) |
0.191 ms P95 / 0.228 ms P99 | < 5.0 ms on-host SLA · PASS |
| 3. Layer-1 Redis Atomic Risk Accumulation | In-memory temporal risk decay & burst correlation across sliding endpoint windows | 0.42 ms | 0.89 ms P95 | < 2.0 ms in-memory SLA · PASS |
| 4. Layer-1 BETH eBPF Dual-Engine ML | 16-feature Isolation Forest + Random Forest ensemble trained on kernel eBPF syscall & process telemetry | 14.35 ms (14.346 ms) |
15.69 ms P95 / 19.52 ms P99 | 99.74% Accuracy (0.9963 F1) · PASS |
| 5. Stream Deduplication & Alert Suppression | 15-minute host + MITRE technique + process-lineage correlation across 500-event telemetry streams | 94.0% Reduction | 500 → 30 Actionable Incidents | 100.0% Attack Recall · PASS |
| 6. Ed25519 Cryptographic SOAR Signing | RFC 8032 Ed25519 signature generation + verification + PostgreSQL state-machine audit persistence | 0.054 ms | 0.067 ms P95 (18,554 ops/sec) |
100% Non-Repudiable · PASS |
When an anomaly or Mirage canary fires, our 5-Agent SOC Swarm correlates MITRE ATT&CK v15 kill-chains while our Autonomous IP & Attacker System Profiler enriches adversary infrastructure in real time:
Hosted inside our India Sovereign Pod, Australia & New Zealand On-Shore Sovereign Pod, or customer air-gapped on-premise infrastructure with automated regulatory dossier generation:
$0 / ₹0 setup fee during evaluation.
Foreign multi-tenant cloud EDRs charge ₹2,500–₹7,000/endpoint/month ($30–$85 USD), route telemetry across cross-border cloud pipelines, and require expensive add-ons for AI SOC triage.
| Architectural Dimension | NiKaDa CyberAI Shield v2.0 | CrowdStrike Falcon Enterprise | SentinelOne Singularity Complete | Palo Alto Cortex XDR Pro |
|---|---|---|---|---|
| On-Host Layer-0 Signature & Canary Latency | 0.051 ms P50 (< 0.08 ms SLA) |
Cloud-dependent behavioral rollup | Kernel + user-space behavioral hook | Cloud analytics correlation |
| Tier-0 Local Process Micro-Freeze | 0.131 ms P50 / 0.191 ms P95 (< 5 ms SLA) |
500 ms – 3,000 ms policy round-trip |
100 ms – 1,500 ms local rollback |
1,000 ms – 5,000 ms cloud verdict |
| Layer-1 Kernel eBPF Behavioral ML | 14.35 ms P50 (99.74% Accuracy · 0.42 ms Redis Lua) |
Proprietary cloud graph ML | Static + behavioral engine | Cloud behavioral analytics |
| 5-Agent Autonomous AI SOC Included | Included in All Plans (Triage, Investigation, Intel, Response, Compliance) | Paid Charlotte AI add-on | Paid Purple AI add-on | Paid Cortex Copilot add-on |
| Alert-Fatigue Stream Suppression | 94.0% Reduction (100.0% Attack Recall) |
Manual SIEM tuning required | Manual STAR rule tuning | Manual XQL rule tuning |
| Data Residency & Air-Gap Sovereignty | 100% Sovereign (India Pod, Australia/NZ On-Shore Pod, or Air-Gapped On-Prem) | Multi-tenant cloud only | High-minimum dedicated cloud | Multi-tenant cloud only |
| Transparent 50-Endpoint Annual Cost | ₹199 / agent / mo (~$2.40 USD · All-Inclusive) | ~₹4,200+ / agent / mo ($50+ USD) | ~₹3,800+ / agent / mo ($45+ USD) | ~₹4,600+ / agent / mo ($55+ USD) |
Deploy our lightweight Rust endpoint sensor across your Linux and Windows fleet in under 60 seconds and evaluate our 5-Agent Autonomous SOC with your own red-team scenarios.