- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
Aquila I
An Indian platform that puts an AI SOC, AI-system security and attack simulation on one security lakehouse— with attack-surface, digital-risk, phishing-awareness, DMARC, archiving and audit products around it, and how each is sold. This hub covers eleven Aquila I products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Eleven intel pages. SOC, AI security, validation, exposure, brand, awareness, email and audit.
Aquila I’s line, product by product — every card is a full intel page, from the AI SOC and AIS DR to AI Red Teaming, BAS, CART, attack-surface and digital-risk monitoring, CASA, DMARC, Email Archival and AuditOps. BIMI is covered on the DMARC page and Cyber Awareness on the CASA page.
Aquila I AI SOC
AI agents triage, hunt and contain on one lake.
OCSF-normalised telemetry in a lakehouse, AI micro-agents for triage and hunting, and a Workbench where analysts approve actions.
Aquila I AIS DR
Finds and watches the AI your staff use.
Discovers SaaS AI, copilots, models and agents, then flags prompt abuse, identity misuse and data leaks, with policy-based response.
Aquila I AI Red Teaming
Attacks your LLMs, RAG and agents first.
Scan and Exploit modes probe LLM apps, RAG pipelines, agents and MCP servers, scoring each 0–100 against OWASP, NIST and MITRE.
Adversarial Exposure Validation (BAS)
Proves your controls catch real techniques.
Runs MITRE ATT&CK-aligned attack chains against EDR, WAF, firewall, email and web gateways and DLP, then scores the gaps.
Continuous Automated Red Teaming (CART)
An attacker’s view of you, around the clock.
Finds exposed services, validates which flaws are exploitable and chains them into breach paths, instead of a yearly pen test.
Aquila I Attack Surface Monitoring
Every internet-facing asset, found and watched.
Discovers shadow IT, exposed ports, forgotten subdomains and expiring certificates on your own internet-facing estate.
Aquila I Digital Risk Protection
Leaks, lookalikes and fakes, spotted early.
Watches the open, deep and dark web, Telegram and paste sites for leaked credentials, phishing domains and fake profiles.
Aquila I CASA
Simulate the attack, then train the person.
Email, SMS, QR and voice phishing simulations with instant micro-training, role-based courses and a risk score per employee.
Aquila I DMARC
Your domain, to enforcement and in logo.
SPF, DKIM and DMARC set up and run as a managed service, with forensic report analysis and BIMI logos with VMC tracking.
Aquila I Email Archival
Every mail kept, searchable and untouchable.
Journals Microsoft 365 and Google Workspace mail into immutable WORM storage with retention rules, eDiscovery search and SSO.
Aquila I AuditOps
Audits run from templates, not spreadsheets.
Template-driven audits and vendor assessments, evidence requirements and validation, and records kept from checklist to closure.
Unified Detection & Response (UDR)
Platform & engineAquila I’s name for its AI SOC sold together with SOAR-style automated response, drawn as four layers: the lakehouse, telemetry from digital-risk and attack-surface monitoring, detection by AI SOC and AIS DR, and validation by BAS and CART. It is a package, so TechBag covers it on the AI SOC page
CTEM programme
Platform & engineA continuous threat exposure management programme that maps Gartner’s five stages (scoping, discovery, prioritisation, validation and mobilisation) to Aquila I’s own products. CTEM is a framework rather than a product, so its parts are reviewed on the attack-surface, BAS and CART pages
Security for AI
Platform & engineA lifecycle that runs from discovering AI in use to assessing, monitoring, detecting and responding. It bundles AIS DR, AI Red Teaming and AI SOC, each of which has its own page here
BIMI and Cyber Awareness
Platform & engineBoth have their own pages on aquilai.io, but each is bought alongside a sibling: BIMI needs DMARC at enforcement first, and the Cyber Awareness training is the course half of CASA. TechBag folds them into the DMARC and CASA pages
Aquila I sells 4 of the products TechBag carries in Security. The Security guide shows how the category splits and which part is yours. →
Why “one lakehouse, then agents” is the whole story
Most security stacks are separate tools, each with its own data. Aquila I putsevery product’s telemetry into one security lakehouse, lets AI agents triage and respond on it, and feeds attack-simulation results back as detection benchmarks, from the SOC to AI systems, the attack surface and the inbox. That makes what you connect, where the SaaS is hosted and which actions agents may take the three things to settle first.
Security Data Lakehouse
Every product writes into one lakehouse, normalised to the open OCSF schema, so detections, exposures and test results can be read side by side.
AI micro-agents and Workbench
Specialised AI agents classify, enrich, hunt and contain; the Workbench tracks cases, SLAs and every autonomous action for an analyst to approve.
Validation loop
BAS and CART results land in the lakehouse as detection benchmarks, and Aquila I says its agents then propose new detection rules and retire weak ones.
Security for AI
AIS DR discovers and watches AI tools, models and agents in use, while AI Red Teaming attacks them before release and again after each change.
Start with the gap you can measure in ninety days — alerts, AI tools, untested controls or phishing clicks — then pick the product that closes it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Threat Management Platform, 2023
Aquila I says it won the category for the second year running; a CIO-voted recognition, not an analyst report
Threat Management Platform, 2022
implied by Aquila I’s own January 2023 video, which calls the 2023 win its second in a row
BD Soft named national distributor
BD Soft took on promotion, the reseller channel and partner training for Aquila I across India
No Magic Quadrant or Wave placement
TechBag found no Gartner, Forrester or IDC evaluation that names Aquila I, in any category
No CVE listed in NVD
a search of the US National Vulnerability Database on 9 October 2026 returned no CVE for Aquila I
AI Red Teaming datasheet published
the newest of Aquila I’s datasheets, after AIS DR in January and AI SOC in February 2026
The company in six figures
See the platform, hear the pitch
Introduction to Aquila I - Industry Recognized Threat Management Platform
Aquila I’s 2022 introduction from its Threat Management Platform era, before the AI SOC and AI security products.
CIO Choice 2023 Awards - Aquila I wins it 2nd time in a Row !!
Aquila I’s January 2023 announcement of its CIO Choice win in the Threat Management Platform category.
Aquila I's Exciting session at SME Channel Accelerator Awards 2022
A 2022 session for channel partners on giving security leaders visibility across threat vectors; a talk, not an award.
Where Aquila I sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Aquila I Across Its Solution Areas
Each dot is a Aquila I solution area: competitive position vs category momentum.
The centre of the current platform and the base of its UDR package, but newer than most SIEMs it competes with, with no published customers or analyst placement.
Platform Breadth × Published Proof
How many security jobs one vendor’s products cover vs how much it publishes to back them up: prices, named customers, analyst reports and hosting regions.
Eleven products on one lakehouse, unusually broad for a bootstrapped vendor, but no published prices, named customers, analyst placement or hosting region yet.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Aquila I?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Who will own it?
3. What does success look like in 90 days?
Eleven products, one data layer
Every Aquila I product writes into the same security lakehouse. Start with the gap you need to close, then see what plugs in around it.
Read →BAS or continuous red teaming?
BAS tests whether your controls catch known attack techniques; CART looks for the paths an attacker could use. Many teams need one first.
Read →Indian-built is not India-hosted
Aquila I is an Indian company, but it does not publish where its SaaS runs. Get the hosting region in writing before data goes in.
Read →Detect AI misuse, or attack it first?
AIS DR watches AI tools and agents in production; AI Red Teaming attacks them before release. The two answer different questions.
Read →Phishing from both ends
CASA trains staff with simulated attacks, while DMARC stops others sending mail as your domain. Together they cover people and brand.
Read →Where Aquila I fits in Security
The Security category sets out the buying routes; Aquila I sells into four of them, with its AI SOC, attack-surface, CASA and DMARC products.
Read →The acronym decoder
Every term on these pages, in one place- AI SOC
- A security operations platform where AI agents do first-line triage, hunting and response.
- Security lakehouse
- One store for all security telemetry that is cheap to keep and fast enough to query.
- OCSF
- Open Cybersecurity Schema Framework: a shared format so data from many tools lines up.
- CTEM
- Continuous threat exposure management, a five-stage programme Gartner defined in 2022.
- BAS
- Breach and attack simulation: safely running real attack techniques to test controls.
- CART
- Continuous automated red teaming: always-on search for exploitable paths into you.
- Attack surface
- Everything of yours an attacker can reach from the internet, known to you or not.
- Digital risk protection
- Watching the web beyond your perimeter for leaks, lookalike domains and fakes.
- Shadow AI
- AI tools, copilots and agents staff use without approval, and the data sent into them.
- MCP
- Model Context Protocol: how AI agents connect to tools and data, and a new attack surface.
- DMARC
- An email standard that tells receivers what to do with mail failing SPF and DKIM checks.
- BIMI
- A standard that shows your verified logo in the inbox once DMARC is at enforcement.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Pick the gap, not the platform
Eleven products share one lakehouse, but each is sold on its own. Start with the one gap you can measure in 90 days and add others when it proves itself.
Get the hosting region in writing
Aquila I is Indian but does not publish where its SaaS runs. Ask for the region, the sub-processors and the retention terms before any data is sent.
Ask for references in your sector
No named customer case studies are published. Ask for two reference calls in your industry and size, and for the product versions those customers run.
Check the connector list
No integration list is published for the AI SOC or the validation products. Map your EDR, firewall, identity and cloud sources and get each confirmed.
Run a scoped pilot
Pilot one product with a written success measure: alerts closed by agents, gaps found by BAS, domains at enforcement or click rates. Judge it on that.
Get it priced in rupees
Nothing is list-priced. TechBag scopes the products you need and gets the quote itemised in INR with GST, with term and renewal caps stated.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| AI SOC (with UDR) | Quoted; the ingest or licence meter is not published | Quote | AI-led SOC triage |
| AIS DR | Quoted; scope by AI tools, users and agents in use | Quote | Shadow AI and AI misuse |
| AI Red Teaming | Quoted; ask whether it is software or a run assessment | Quote | Testing AI apps and agents |
| Adversarial Exposure Validation (BAS) | Quoted; scope by controls and endpoints tested | Quote | Control validation |
| CART | Quoted; scope by external assets and environments | Quote | Always-on red teaming |
| Attack Surface Monitoring | Quoted; scope by domains and IP ranges | Quote | External asset discovery |
| Digital Risk Protection | Quoted; scope by brands, domains and executives | Quote | Brand and leak monitoring |
| CASA | Quoted; typically scoped by employee count | Quote | Phishing simulation |
| DMARC (with BIMI) | Quoted; one-time setup plus ongoing support | Quote | Domain enforcement |
| Email Archival | Quoted; ask whether it is per mailbox or per GB | Quote | Compliance retention |
| AuditOps | Quoted; scope by audits, entities and users | Quote | Audit management |
Aquila I publishes no price for any of its eleven products and no INR rate card; every product is quoted, and the DMARC service describes its price as customised to your needs. TechBag scopes the products you need and gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Reading Indian-built as India-hosted
Aquila I does not publish where its SaaS runs. For DPDP and sector rules, record the region from the contract, not from the company’s address.
Reading a logo as a customer
Aquila I publishes no customer case studies. Treat any logo shown in a pitch as unconfirmed until a reference call or a signed letter backs it.
Mistaking a dashboard for a certificate
The ISO 27001 and SOC 2 tiles on Aquila I’s site are sample data inside its audit product. It publishes no certification of its own, so ask for one.
Treating CART as your pen test
Continuous red teaming finds paths between yearly tests. Where a regulator asks for a CERT-In-empanelled audit, you still need that audit done.
Buying the whole platform at once
Broad suites from young vendors are best proven one product at a time. A pilot with a written measure protects you more than a bundle discount.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are adding AI to the SOC and testing their own AI at the same time — which is why Aquila I built AIS DR and AI Red Teaming on the same lakehouse as its SOC.
AI agents in the SOC
Aquila I’s AI SOC, with a February 2026 datasheet, uses specialised AI micro-agents for triage, hunting and containment under analyst oversight.
What it means for you
Ask which actions agents may take without a human.
AI as an attack surface
Aquila I added AIS DR in January 2026 and AI Red Teaming in September 2026, covering copilots, agents, RAG pipelines and MCP servers.
What it means for you
List the AI tools and agents in use before you buy.
Validation over assumption
Gartner’s CTEM framework puts validation as its own stage; Aquila I sells BAS and CART for it and feeds the results back into detection.
What it means for you
Test your controls before an attacker does.
Email authentication enforced
Large mailbox providers now push bulk senders to authenticate; Aquila I sells DMARC as a managed service, with BIMI on top.
What it means for you
Get every sending domain to DMARC enforcement.
Questions buyers ask about Aquila I
Ready to shortlist Aquila I?
Open any of the eleven intel pages for the deep dive, or let a TechBag advisor build the case with you — the gap to close first, the hosting region in writing, reference customers in your sector, and the quote that fits, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.