We build the software that watches your data layer.
Database activity monitoring, managed databases, sovereign meetings, and managed Kubernetes, built for banks, government, and the service providers who serve them. Everything runs on infrastructure you control, under keys you hold.
The product, as it actually runs
Four products, one discipline
Vyrell
LiveEach connector authenticates as a low-privilege, read-only audit reader and polls the engine’s own audit trail across ten database engines.
Nothing is installed on the production database, so onboarding a target is a grant of read access rather than an agent rollout.
Nothi
LiveA Kubernetes-native control plane provisions databases as operator custom resources across twelve engines, inside tenant-isolated namespaces on the customer’s own cluster.
Managed-service operations, provisioning, backups, metering, and upgrades, without handing the data to a third-party cloud tenant.
Dorbar
LiveEvery room carries a classification fixed at scheduling: an Official room the in-cluster media server is trusted to record and transcribe, or a Sealed room that is end-to-end encrypted and the server cannot see at all.
Both trust models on one platform, air-gap capable, chosen per room rather than per product.
Moncho
LiveManaged Kubernetes with a hosted control plane per tenant and three isolation tiers, up to a cluster that shares no API server or etcd with anyone else.
Sovereign clusters with a compliance pack attached: posture per framework, hash-chained snapshots, continuous CIS scanning.
Each product names its own limits on the platform page.
How it works, and what that gets you
Each connector signs in as a low-privilege, read-only audit reader and polls the database’s native audit trail.
Onboarding a database is a permission grant, not an agent rollout, so a new target takes days, not a change-management cycle.
Vyrell’s own audit log is SHA-256 hash-chained and insert-only, with a daily integrity verifier.
Tampered records, chain breaks, and sequence gaps are detectable, so the trail holds under an auditor’s scrutiny.
Users, source hosts, client IPs, and applications are scored against their own baselines, with peer-group comparison.
Each alert carries a plain-English reason for the score, so an analyst triages instead of reverse-engineering a number.
If a query behind a compliance report times out, the report is marked incomplete and given no score.
You never file a passing result that the underlying data did not support.
Evidence, not adjectives
Both issued by AQC under EGAC accreditation, recognised through the IAF MLA, and valid through 20 April 2029. We hold no logo-use licence, so these are stated in text only.
Who we build for
Banks, NBFIs, insurers, mobile financial services, and payment service providers under PCI-DSS, SOX, and central-bank ICT guidelines, including the 26 Bangladesh Bank ICT rules that ship in the policy library.
Hospitals and health systems that must show who touched patient records, and when, without instrumenting clinical databases.
Agencies that require deployment inside their own boundary, with data and keys held in jurisdiction.
Regulated enterprises consolidating database oversight into one console with role-scoped access.
Vyrell, Nothi, and Moncho are multi-tenant and licensable, so a CSP, MSP, or MFS operator can run them for their own customers instead of reselling someone else’s cloud. Dorbar deploys as a tenant of one, by design.
A 30-day proof of concept, at zero cost.
Open to qualified BFSI, government, and defence organisations. You keep the audit output whether or not you buy.
Thirty minutes with an engineer, not a sales deck. Bring your estate: engines, versions, audit configuration.
We agree the targets, the read-only accounts, and the frameworks that matter to your auditor.
Zero cost for qualified BFSI, government, and defence organisations. Real events, real reports, your data.