Book a Demo

How it works

FROM PROTECTION TO PROOF TO INSURANCE.

The old model asks organisations to declare what’s true. Halo‑IQ starts with operational evidence from the technology already protecting the business, normalises it into TrueState™ (a consistent view of protection posture), applies versioned logic, and produces an explainable determination and actions required.

The operating model (end to end)

Connect evidence → Determine protection position → Identify actions → Remediate → Re‑determine → Stand behind the service → Insure the MSP’s qualifying warranty liability → Keep watching as evidence changes

Book a demo Jump to Evidence Contact
The Halo flow
Technology Evidence TrueState™ Determination Protection

Jump to a section

Evidence TrueState™ Determination Protection

Evidence

Halo‑IQ starts with evidence from the security and IT systems already in place. It tracks what evidence exists, what is missing, and what is out of date — so determinations aren’t based on assumptions.

Every evidence item has a source, timestamp, and lifecycle, so Halo can show where information came from, whether it is current, and what determination it supported.

TrueState™

TrueState™ is Halo’s continuously updated view of the customer’s actual protection posture. It normalises evidence from different technologies into a consistent model so Halo can determine what is true, what has changed, and what requires action.

Because the model is evidence‑backed and the logic is versioned, the same evidence and the same logic version produce the same outcome.

Determination

Versioned rules produce a protection determination and “actions required”. Each outcome is explainable: which evidence was used, which logic applied, and what must change to improve the position.

Every meaningful determination leaves a clear record — designed to answer reliably: what was used, what was decided, and why.

Every decision leaves a record
Halo Determination Record append‑only • timestamped • reproducible What was used Evidence snapshot Inputs captured at the point of decision Rules version Deterministic logic version applied What was decided Determination • Requirements met • Actions required • Not meeting requirements Actions required What must change to improve the position Every meaningful determination binds evidence + rules + decision + actions + protection state — so it can be reviewed and reproduced.

Protection

Protection is the operational outcome: actions required, protection status, and a continuously updated view of whether required conditions are being maintained — updated as evidence changes.

This is what makes the model continuous: when the underlying operational reality changes, the evidence changes, and the protection position is re‑determined with a new decision record.