Who Hydra is for
Hydra is built for regulated Ghanaian institutions that collect alerts and do not have enough analysts to read them all. Today we work with their security teams. Once we are licensed, we plan to run it for them.
Banks, payment companies and fintechs
You run a small security team, or you do not have one. You may already collect alerts from tools such as Wazuh or Microsoft Defender. The Bank of Ghana's 2026 cybersecurity directive expects you to detect threats and respond to them. Hydra gives your team a first pass on every alert, and an evidence trail your auditors can follow. Once we hold our licence, we plan to run it for you.
Licensed cyber firms
If you run monitoring for clients, Hydra can be the first pass your analysts review. Today Hydra is a platform, and your analysts run the monitoring. Radiant does not run a customer's security operations centre yet. We plan to, once we are licensed, so tell us how you would want to work with us.
What Hydra recognises today
These examples come straight from the checks Hydra runs. Each has an attack and a harmless look-alike.
- Credentials read from memory. A program in a user's Downloads folder opens the process that holds passwords. Hydra flags it. When security software in a system folder does the same, Hydra treats it as a weak signal only.
- A password spray. Failed logons across ten or more accounts from an outside address look like an attack. Three failures on one account from inside the network look like a mistyped password.
- Kerberos tickets in bulk. Five or more tickets requested with weak encryption is a known attack on service accounts. One or two tickets with strong encryption is ordinary service access.
Not yet
We are not built for air-gapped government networks, industrial control systems or telecom-scale traffic, and we would rather say so.
Last reviewed: 21 October 2026 by Samuel Maclar.