Technology platform
Dark Horizon
Technical evidence for external cyber risk.
Dark Horizon reconstructs an organisation’s external attack surface and correlates technical observations into a traceable evidence base for assessment, prioritisation and decision-making.
Dark Horizon · Technology platform
Evidence has a history.
Fictitious example- 1first seen Service reachable externally. Source: outside-in scan, day 1.
- 2changed New version identified. Attribution to the same organisation confirmed.
- 3fixed Access no longer reachable. Counter-evidence secured with timestamp.
- 4seen again Visible again. Cause not tested, therefore unknown.
The situation
What does your company look like from the outside?
Dark Horizon reconstructs the external attack surface that can be reliably attributed to your organisation. Consider an illustrative example: remote access is reachable, its software version is affected, credentials associated with the same domain have been compromised, and those credentials carry access rights.
Dark Horizon correlates these observations. The connection may indicate a possible attack path; it does not prove that an attack has taken place. Source, time, attribution and counter-evidence remain visible, as do gaps in coverage.
AI supports pattern recognition. People test the evidence and decide what it means. pleXcreen remains the advisory and implementation partner; Dark Horizon is the technology behind that work.
Not tested means unknown.
What Dark Horizon makes visible
- 01
Traceable evidence
Source, time, attribution, counter-evidence and test status for each observation.
- 02
Known gaps
What the available sources cover, and what remains outside that coverage.
- 03
A visible history
When an observation was first seen, changed, fixed or appeared again.
Purpose
From signals to defensible evidence.
- 01identify external systems, services, technologies and identities
- 02retain the source, time and attribution of each observation
- 03correlate entities, access rights and relationships
- 04make counter-evidence and gaps in coverage visible
- 05track observations from first seen to reappearance
- 06prepare evidence for human review and decision-making
Processing chain
How signals become verifiable evidence.
- 01
Collect
Technical signals from different sources are gathered within the agreed scope.
- 02
Normalise
Formats, names and timestamps are harmonised so that observations become comparable.
- 03
Correlate
Systems, versions, identities and rights are connected without automatically treating a relationship as proof of an attack.
- 04
Assess
Source, time, attribution, counter-evidence, coverage and test status determine the strength of the evidence.
- 05
Track
The history remains visible: first seen, changed, fixed or seen again.
- 06
Hand over
People review the evidence; pleXcreen interprets it and supports decision-making and implementation.
Evidence states and limits
What has not been tested remains unknown.
- Passively observedIdentified without active intervention.
- Actively validatedOnly with an explicit mandate and within the agreed scope.
- Not testedReported as unknown, not as inconspicuous.
Dark Horizon does not claim completeness. Gaps in coverage remain visible; the absence of a finding is not proof of security.
A possible attack path or an indication of credentials proves neither an attack nor successful access.
AI supports pattern recognition. People remain responsible for assessment and recommendation.
Relationship
Technology and advisory remain distinct responsibilities.
pleXcreen uses Dark Horizon as a technical analysis platform for its assessments and decision-support services.
Dark Horizon generates and structures technical evidence. pleXcreen adds expert context, human assessment and accountable decision support.
The two layers are deliberately separated: technology provides evidence. People remain responsible for interpretation and decisions.
Technology generates evidence.
People assess context.
Decisions remain accountable.
Platform
Developed as an independent platform.
Dark Horizon is being developed as an independent technology platform beyond pleXcreen’s advisory services.
Additional access and deployment models are under development.