RAPTOR Labs is where our threat model gets smarter. We turn threat data into intelligence, detect the patterns behind it, predict what comes next, and run an agentic improvement loop so the whole RAPTOR ecosystem learns from itself and improves with every cycle.
01Threat data
02Intelligence
03Pattern detection
04Prediction
05Agentic improvement loop
The RAPTOR Harness
One orchestrator · three agent teams · one model that learns
LAYER 1 · ORCHESTRATOR, ENGINE, MODEL
RAPTORRuns the pipeline
Included in every email, document and e-signature envelope. The pre-crime engine collects protocol data, the customer's policies define what is a risk, and the model analyzes openings, recipient activity, connections and devices. When the signals show risk in the content it triggers the AI Classification Agent, the AI Alert Agent that communicates to the organization, and the AI AutoLock Agent.
OutputAlerts and locks for the organization, and the model every team reports back into.
LAYER 2 · AT THE METADATA
OWLEnrichment
Sits where RAPTOR collects the metadata. Breaks the protocol data into more data points and cross-analyzes them: browser versions against OS versions, IPs, locations, the domain age of URLs. When it finds a new set of relevant data it reports back, so RAPTOR learns to identify and detect better moving forward.
OutputNew data points, fed back into the RAPTOR model.
LAYER 3 · AT THE ALERTS
HAWKCyber counterintelligence
Sits where the alerts have been generated. Finds activity that looked normal but is suspicious, elevates the false negatives RAPTOR passed as expected, and groups patterns into threat actors, global organizations and state-backed attackers. Proves fingerprints on vast amounts of data, matches duplicates and promotes the most relevant to OSPREY.
OutputProven fingerprints and pattern groups promoted to OSPREY: past patterns that predict future attacks.
LAYER 4 · ACROSS ALL CUSTOMERS
OSPREYGlobal intelligence
Sits across the entire customer database, fed by RAPTOR, OWL and HAWK. Identifies widespread attacks that target different industries the same way, builds global fingerprints every industry benefits from, refines the fingerprints HAWK sends, and gives threat actors an identity and a way of operating.
OutputNew triggers promoted to the RAPTOR model. The source of truth for the RPost proprietary model of intelligence.
Agentic Improvement Loop
RAPTOR harness · 46 s loop
The harness, assembled step by step
RAPTOR · orchestrator, engine, modelOWL · at the metadataHAWK · at the alertsOSPREY · across all customersDashed lines feed the model · solid lines carry data forward
Click any step to jump to it. The diagram shows the order of work, not live data.
02
LAB 025 projects in beta
FX Studios
Working software, not slides. Every clip below is recorded from a beta development environment that runs today.
BETA 01
RAPTOR HawkEye 3D Report
A pre-crime report for CISOs and CTOs. A rotating threat radar, the trail of each email from the sender to every opening, and fingerprint matches across countries. It runs from a single file, with no server and no internet connection.
Master 1.3Standalone HTMLRecipients masked by default
Threat radar: globe or map view of every plotted opening
Review queue sorted by priority, with fingerprint profiles
Email trail replayed in recorded order, opening by opening
Live capture
BETA 02
RPost AI Classification
A classification platform for every RPost product. It labels content by sensitivity, from SharePoint and OneDrive or from existing Purview and Proofpoint labels, then applies the right policy wherever the content goes: RMail, RDocs, RSign and Large File Share. Rules decide first; a decision engine handles the unsure files.
Built withProspect participation: Morguard, Canada
Platform conceptRMail · RDocs · RSign · LFSMasked sample data
Live capture
BETA 03
RPost Product Sandbox
Interactive storytelling across platforms. A high-fidelity replica of the live products, RPost One, RAPTOR AI, RMail, RDocs and RSign, where one story moves from Outlook to the portal to RAPTOR AI, exactly as a customer would see it.
Master 1.0Outlook → RPost One → RAPTOR AI
Live capture
Outlook RPost One RAPTOR AI
BETA 04
RPost Interactive Product Stack Diagram
The whole RPost stack in six rings, from inbound gateway to "attack preempted", played as stories. Here, a trusted recipient forwards a message, one forwarded copy is opened from a compromised account, and RAPTOR's Active Tracker catches the unusual opening.
Master 3.94 storiesOffline single file
Live capture
FX 05
New project
Pitch video production
In-house audio and video production. FX Studios produced the RAPTOR PRE-Crime pitch videos for the Tradewinds (Department of War) and IARPA marketplaces, and a Data Sovereignty video: script, computer-generated voice-over, music, sound effects, motion graphics and animated diagram stories, rendered to 1920×1080 MP4 by RPost's own pipeline.
HawkEyeOne message tracked across three continents
Data SovereigntyEvery file stays inside its borders
03
LAB 03In development
Proprietary Super Intelligence
RPost is building its own intelligence model, so we can explore new AI as it arrives and adapt quickly, instead of waiting on closed AI companies.
Our approachPowered by NVIDIA
Super-AI computeBuilt to explore what comes next
AI is moving fast, and today's best model will not be tomorrow's. Running our own model on NVIDIA accelerated computing lets RPost try new models and approaches as they appear, and adapt our products on our own schedule.
TrainFine-tune RPost's open-weight model on de-identified threat patterns that OSPREY has validated.
PredictScore the pre-crime risk of every opening of protected content, for RAPTOR SI.
ClassifyLabel content by sensitivity for RMail, RDocs, RSign and Large File Share.
MatchSearch behavioral fingerprints across proxies, tenants and countries.
ExplainWrite HawkEye reports and analyst summaries, with a confidence score on every result.
What it is
Open weightRPost holds the model weights, so our core intelligence does not depend on a closed AI company's API.
Commercially licensedA licence that allows commercial use and RPost's own tuning.
Where it runs
Powered by NVIDIATrained and run on NVIDIA accelerated computing that RPost operates, so the model and its improvements belong to RPost.
SafeguardsOnly allowed answers, a confidence score on every result, and a person in the loop when confidence is low.
What it delivers
Token maximizationMore useful work from every token: short, typed outputs instead of long free text.
Workflow efficiencyBuilt into the flows RPost already runs: classification, threat triage and reporting. Each OSPREY-validated fingerprint improves the next release.
RPost AI Labs
Technology will keep changing. Our research and development makes sure we change first.
RAPTOR Labsbuilds a threat model that gets smarter with every signal.
FX Studiosbuilds the next products, and the stories that launch them.
Proprietary Super Intelligencebuilds the intelligence we own, ready for whatever AI brings next.