MAYA - AI Agent
Team Leader of AI Agents
Remediation Agent
Runs a dry run, waits for your approval, then fixes it
Evidence Collector
Collects your SOC 2, ISO 27001 and DPDP proof from the tools you already use
IP Scanner
Checks every public address for open ports, known CVEs and weak TLS
DAST (Public + Private)
Tests your APIs for 300+ vulnerability classes, inside and outside the network
CSPM
1,000+ checks across AWS, Azure and Google Cloud, mapped to your frameworks
Cloud Cost Optimization
Rightsizing and idle detection - customers cut cloud spend 28% on average
Integrations
20+ Integrations with your favorite tools
Asset Management
Finds vulnerabilities on your laptops and servers
ECR Container Image Scanning
Scans every ECR image for CVEs before it reaches production
Cloud Security
Keeping AWS, GCP and Azure locked down
AI Governance
Using AI at work without losing control of it
Data Privacy
DPDP, GDPR and looking after personal data
GRC
Audits, controls and staying ready for them
FinOps
Spending less on cloud without breaking things
API Security
Finding holes in your APIs before anyone else
Three days to notify. One hour if MAS regulates you.
Singapore’s PDPA gives you three calendar days to notify the PDPC once you assess a breach as notifiable. MAS-regulated firms get one hour from discovering a relevant incident. DeDups keeps the facts ready, so the clock is spent writing rather than searching.
15 minutes to connect. No credit card. No sales call.One hour for MAS-regulated financial institutions, from the moment a relevant incident is discovered.
The hard part is the assessment, not the form.
Before the three-day clock starts you have to decide whether the breach is notifiable, which means knowing what was exposed, for how long, and whose data it was. Malaysia, Indonesia, Thailand and the Philippines each run their own version of the same demand. Singapore’s penalties reach 10% of annual turnover for larger organisations.
- The exposure window is a guess, because nobody knows when the bucket went public.
- Each country’s rule is tracked by a different person in a different sheet.
- The one-hour MAS clock starts before anyone has opened the console.
Know the window. Do not guess it.
Every finding is dated when it first appeared and when it was closed. That is your exposure window, on the record, before anyone asks you for it.
- 01Watch continuously
Checks run against every connected account continuously, so a bucket that goes public is a finding within the hour rather than a discovery next quarter.
- 02Pin the window
Every finding carries the moment it was first seen and the moment it was fixed. The exposure window becomes a fact, not an estimate.
- 03Route it to a person
Maya sends it to the named owner on Slack, Jira or email and escalates if nobody answers within the window you set.
- 04Export the pack
One export carries the timeline, the systems, the owners and the fix log - enough to write the notification from.
The numbers, and what sits behind them.
Continuous checks across AWS, Azure, Google Cloud and Kubernetes
First-seen and fixed-at timestamps on every finding
Findings routed to a named owner, with escalation built in
One incident export with timeline, systems, owners and fix log
Multi-country view - findings carry the account they came from
ISO 27001 and SOC 2 evidence collected and mapped as checks run
A person still says yes.
Every fix is simulated first and shown as a full diff. Nothing changes until someone approves it, and each approval is recorded with a name and a time - which is the record a regulator asks about afterwards.
The questions we get asked most.
No. Notification is your team’s call and your team’s signature. DeDups gives you the exposure window, the systems and the fix log in one export, so writing it takes minutes.
Yes. Connect every cloud account into one view and filter by account or region. Every finding carries the account it came from, so a country-level answer stays possible.
Yes, for software inventory and known vulnerabilities. The Inspector agent runs on any Windows, macOS or Linux host, cloud or not.
Somewhere else on this list?
Start with your own numbers.
Connect one account. The first scan finishes in about 15 minutes and the report is yours either way - free, no credit card, no sales call. Read it, then decide.
sales@dedups.ai - we reply within 2 hours