# Windsor Security
> AI security assessment and security operations tools for lean teams

## Company Overview
Windsor Security builds tools that give security teams visibility into AI risk, threats, and operational efficiency. We help SOC analysts, threat hunters, and security leaders make better decisions faster.

Website: https://windsorsec.com
Contact: joe@windsorsec.com
Entity: Windsor Security LLC (Ohio)

## Services

### AI Security Posture Assessment
Windsor Security performs AI security assessments for mid-market companies (500–5,000 employees) running Microsoft 365. We map shadow AI usage, evaluate data exposure through OAuth app consents and DLP gaps, and deliver a prioritized remediation roadmap.

**What You Get:**
- Complete inventory of AI tools in your environment (sanctioned and shadow)
- Data flow analysis showing what data AI tools can access
- Risk-prioritized findings mapped to NIST AI RMF and Colorado AI Act
- Executive summary with board-ready risk scoring
- 90-day remediation roadmap with quick wins

**Ideal For:**
- Mid-market companies on Microsoft 365 (E3/E5/Business)
- Organizations without dedicated AI governance
- Security leaders preparing for AI compliance requirements

URL: https://windsorsec.com/ai-assessment

### Consulting Services
- Detection engineering and SIEM optimization
- AI security consulting and shadow AI audits
- Threat intelligence program development

URL: https://windsorsec.com/services

## Products

### Wallhacks - IOC Correlation & Threat Intelligence
Wallhacks reveals hidden relationships between threat indicators that your current tools miss. Submit any IOC and get instant enrichment from multiple intelligence sources with correlation and similarity matching.

**Key Capabilities:**
- Multi-source IOC enrichment (domains, IPs, URLs, hashes, emails)
- Similarity matching to find related threat infrastructure
- Risk scoring (0-10) with confidence levels
- MITRE ATT&CK mapping
- RESTful API with JWT authentication

**Ideal For:**
- SOC analysts needing instant IOC context
- Threat hunters finding related infrastructure
- IR teams scoping incidents quickly

**Pricing:**
- Free tier: 20 enrichments/day
- Professional: $99/month (500 enrichments/day)
- Enterprise: Custom pricing

URL: https://windsorsec.com/wallhacks
Free Tool: https://windsorsec.com/enrich
Pricing: https://windsorsec.com/pricing

### SignalForge - Detection Tuning & Noise Cost Accounting
SignalForge quantifies the cost of alert noise in your SOC. It calculates the "Noise Bill" for every detection rule and provides tuning recommendations ranked by impact.

**Key Capabilities:**
- Noise Bill calculation (cost in dollars and analyst hours)
- Noisiest rules ranking
- Per-rule drilldown with closure patterns
- Impact dashboard showing hours saved

**Ideal For:**
- Detection engineers prioritizing tuning efforts
- SOC managers understanding time allocation
- Security leaders justifying optimization investments

**Integrations:**
- Microsoft Sentinel (available now)
- Splunk, Elastic (coming soon)

URL: https://windsorsec.com/signalforge
Free Tool: https://signalforge.windsorsec.com/

## Technical Information

### API Access
Both products offer API access for programmatic integration:
- RESTful JSON APIs
- JWT authentication
- Rate limiting based on tier

### Data Handling
- No raw logs stored (SignalForge uses metadata only)
- Data retention configurable per customer

## FAQ

**Q: What IOC types does Wallhacks support?**
A: Domains, IP addresses, URLs, file hashes (MD5, SHA1, SHA256), and email addresses.

**Q: What's included in the Wallhacks free tier?**
A: 20 enrichments per day with full access to correlation and similarity features.

**Q: What data does SignalForge need?**
A: Only incident/alert metadata from your SIEM—no raw logs or sensitive event content.

**Q: Which SIEMs does SignalForge support?**
A: Microsoft Sentinel is fully supported. Splunk and Elastic integrations are in development.

**Q: What does the AI Security Assessment cover?**
A: We map all AI tools in your Microsoft 365 environment, analyze data exposure through OAuth consents and DLP gaps, and deliver a prioritized remediation plan aligned to NIST AI RMF.

**Q: Who is the AI Assessment for?**
A: Mid-market companies (500–5,000 employees) on Microsoft 365 who lack visibility into shadow AI usage and want to get ahead of compliance requirements.

## Request a Demo
Schedule a demo to see Wallhacks or SignalForge in action.
URL: https://windsorsec.com/demo

## Company Facts
- Founded: 2024
- Entity: Windsor Security LLC (Ohio)
- Focus: AI Security, Security Operations, Threat Intelligence
- Target Market: Mid-market security teams, MSSPs, Security consultancies