Otis™ was designed, developed and tested in-house by Parabellum's security researchers and offensive security experts, consultants who hold Australian government security clearances and have delivered advanced offensive security engagements for ASX 100 & Fortune 500 companies, all levels of Government, Banking, Energy & Resources, the Defence supply chain and critical Infrastructure entities.

The tradecraft of modern adversaries, threat actors and security consultants is built into the capability itself, not written into a methodology document that gets referenced when someone remembers to. The people who built Otis™ are the people who direct it.

Most penetration tests sample. Not by choice but by arithmetic. A tester covers what they can reach in the days available, and whatever falls outside that window may go untested. The client assumes the surface was covered. The tester knows it was sampled.

Parabellum consultants use Otis™ to assess substantially more of the agreed scope than a time-bound manualtest can reach, equating to more roles, more workflows, more hosts, rather than a sample.

Fully agentic & autonomous tools plateau. An agent finds something shallow, marks the objective met, and moves on because nobody is watching to tell it that it stopped one step short of something that mattered. We call it the lazy agent, and it is why unsupervised autonomy often produces volume rather than insight.

A senior Parabellum consultant directs every Otis™ augmented engagement from start to finish. Not scoping at the front and reviewing at the back but rather, steering, throughout. Recognising the moment an agent settles for something shallow, and redirecting it to the path that actually matters.

The coverage of a machine. The judgment of a senior offensive security expert. On the same engagement.

100% human-validated findings. No finding reaches your report without being checked by a qualified Parabellum consultant, validated, prioritised, and explained in the context of your environment.

What you receive is an assurance a named consultant stands behind. Not a queue of machine output for your team to triage.

Every Otis™ engagement, on either tier, runs in an isolated environment, walled off with a single controlled egress so your engagement never touches another. Encryption in transit and at rest, and every action logged and attributable.

Otis™ Sovereign runs model inference on AWS Bedrock in Australia, on infrastructure IRAP-assessed at the PROTECTED level. Your data is processed in Australia and is never sent to a third-party model provider, with KMS-managed keys throughout.

Otis™ ZDR runs model inference on SOC 2 Type II and ISO 27001-certified infrastructure in the United States under zero data retention. The model provider does not store prompts or outputs, except where required by law or to prevent abuse, and never uses them for training. Engagement records stay in Australia.

Parabellum also participates in the security and safety programmes of frontier AI providers including Anthropic and OpenAI, programmes those providers carefully vet membership into.

Otis™ is where our research compounds. Every engagement teaches our consultants something about how modern systems fail, and that tradecraft is encoded back into the capability, so each assessment benefits from the ones before it.
‍
What never feeds back is your data on either tier. No client data is used to train any model, not anonymised, not aggregated, not opt-in. The learning comes from our researchers, not from your environment.

Otis™ augmented delivery applies to external network, wireless network, web application, thick client, APIs, mobile application and source code security testing today.

Where your AI-use policy requires onshore processing, Otis™ Sovereign keeps every step in Australia. Where a scope isn't Otis™ capable, or your internal policy restricts AI use entirely, the same senior consultants deliver by hand, using advanced certifcatons, years of experience across complex environments and advanced manual offensive tooling.