Home / FAQ

Identiqa FAQ

AuraLink, ProtectionGrid, AuraCore, Aura, immutable backups, and procurement through AWS, Google Cloud, and Microsoft Azure.

What is Identiqa, and is it a KYC or identity-verification vendor?

Identiqa is an enterprise cybersecurity company founded by Daniel Schoenland. It builds the 2U AuraLink edge appliance with dual Identiqa Aura processors, the ProtectionGrid shield with storage-locked immutable backups, the AuraCore server and Kubernetes manager, the multi-model defence AI Aura, and a 24/7 human incident response team. Identiqa isn't a KYC or consumer identity-verification vendor.

Why aren't SIEM dashboards and detection-only tools enough to stop fast ransomware attacks?

Dashboards display alerts while attackers encrypt your servers. Identiqa acts: isolating threats at the network edge, locking immutable backup copies in hardware, removing persistence via signed commands, and answering the phone at 3 a.m.

Who is Identiqa built for: CEO and Board, CISO, or IT leadership?

For the CEO and Board, Identiqa secures operational continuity and board governance under the NCSC Cyber Governance Code, s.174 Companies Act 2006, UK GDPR, and the NIS Regulations. For the CISO, it provides full-spectrum defence and signed remediation instead of ticket queues. For Head of IT, it deploys beside the existing firewall and runs on the cloud agreement the company already holds.

Can Identiqa be procured through an existing Amazon Web Services (AWS), Google Cloud, or Microsoft Azure agreement?

Yes. Identiqa can be contracted directly or procured through the cloud agreement your organisation already holds with Amazon Web Services (AWS), Google Cloud, or Microsoft Azure, keeping procurement aligned with your existing infrastructure budget.

How does the 2U AuraLink appliance protect an enterprise network alongside the existing firewall?

AuraLink is Identiqa's purpose-built 2U rack appliance powered by two Identiqa Aura processors. Installed alongside your existing firewall, it inspects traffic at the network edge, runs local defence AI models, and holds cryptographically locked backups that replicate to the Identiqa Cloud.

Which six attack surfaces does ProtectionGrid close across DNS, web, mail, VPN replacement, and workforce sign-in?

ProtectionGrid is the six-layer security shield running across AuraLink and the Identiqa Cloud: SecureDomain (DNS), WebShield (web/API/DDoS), MailShield (phishing and payload defence), HybridMail (mail continuity), AppShield (VPN-less application access), and WebAuth (phishing-resistant workforce sign-in).

How do storage-locked immutable backups survive a ransomware attack even when domain admin credentials are stolen?

In 94 per cent of ransomware attacks, criminals attempt to destroy the backups, and in 57 per cent of those attempts they succeed (Sophos 2024). ProtectionGrid with AuraLink locks every snapshot cryptographically at the storage layer on the appliance and in the Identiqa Cloud. During the retention period, no user or compromised domain administrator can overwrite or delete the copy.

How does AuraCore find and remove hidden attacker persistence on Linux, FreeBSD, VMs, and Kubernetes without an open root shell?

AuraCore is Identiqa's cluster and server manager for bare-metal Linux and FreeBSD hosts, virtual machines, Kubernetes, and Docker. Nodes verify at boot via SecureBoot, TPM 2.0, and mutual TLS. AuraCore hunts persistence artifacts continuously and applies patches or isolation via cryptographically signed commands from a closed command set.

How does the Aura multi-model defence AI use Black Iris dark-web intelligence to stop attacks without hallucinating commands?

Aura is Identiqa's multi-model defence AI. Fast local models on the AuraLink appliance handle split-second edge decisions, while frontier reasoning models and Black Iris dark-web intelligence analyze complex attacks. No AI model ever receives an open shell; every action is restricted to a closed set of signed commands, or runs in read-only SIEM/SOC mode.

Does Identiqa replace an existing SOC or SIEM, or how do they work together in active and read-only modes?

Identiqa works alongside your internal SOC and SIEM in active, hybrid, or read-only mode rather than replacing them. Your analysts gain hardware edge containment, storage-locked backups, and verified host actions underneath instead of raw alert noise.

Who takes over crisis management and adversary communication during an active ransomware extortion?

Identiqa's 24/7 incident response team can take over an active ransomware crisis, including direct communication with the extortion group, while isolating affected systems and preparing clean restoration from locked backups.

Do we have to replace our existing firewall or cloud provider to deploy Identiqa?

No. AuraLink deploys alongside your existing firewall in the rack, and the platform can be procured through your current Amazon Web Services, Google Cloud, or Microsoft Azure contract.

How much does 24/7 emergency incident response cost during a cyberattack without an ongoing retainer?

At Identiqa, the initial emergency consultation with a senior incident responder costs a fixed EUR 380 plus VAT for up to 60 minutes, with no prior retainer required. Any subsequent containment, negotiation, or recovery work is scoped transparently after the initial triage.

How do CEOs and boards satisfy personal oversight and audit evidence duties under the NCSC Cyber Governance Code, s.174 Companies Act 2006, UK GDPR, and NIS Regulations?

Identiqa delivers three verifiable technical controls for board oversight, auditors, and cyber insurers: automated containment outside and inside the network via the 2U AuraLink appliance, cryptographically storage-locked backups beyond domain admin privileges, and 24/7 human incident response with forensic evidence for mandatory reporting.

Who do I call immediately during an active cyberattack or ransomware breach (24/7 emergency line)?

Call Identiqa 24/7 incident response on our emergency line at +44 20 4634 2000, then press the # key. Please call from a mobile number; we text our engagement terms in advance. The initial consultation is a one-time EUR 380 plus VAT for up to one hour, with no ongoing retainer required.