๐Ÿ† #1 IN THE WORLD ยท CYBERGYM 99.2% ANTHROPIC CVP ยท 1 OF 49 WORLDWIDE OPENAI SECURITY PROGRAM

The security layer
the AI era was
missing.

Lyrie is the only agent that pentests apps, defends agents, and researches binaries โ€” in one autonomous daemon.

pip install lyrie-omega Request a Demo โ†’ Watch it hack
#1 on CyberGym ยท 99.2% MIT Open Source 1,977 tests passing OWASP ASI 2026 ยท 10/10 PyPI ยท lyrie-omega

#1 in the world.

Lyrie Agent holds the highest score on the CyberGym Level 1 leaderboard โ€” reproducing 99.2% of real-world vulnerabilities with working exploits, in a single trial. Ahead of every lab, every vendor, every agent.

#1
Rank out of 85 entries
99.2%
Vulnerabilities reproduced
1
Trial โ€” no retries
RankAgentBuilt byScore
#1โœฆ Lyrie AgentLyrie99.2%
#11PanshiHuawei Cloud95.4%
#25MDASHMicrosoft91.0%
#26Wiz AtlasWiz90.9%
#33Google AntigravityGoogle86.3%
#35OpenAI Agent ยท GPT-5.5-CyberOpenAI85.6%
#41Anthropic Agent ยท Claude Mythos PreviewAnthropic83.1%

Source: official CyberGym leaderboard, cybergym.io ยท Level 1, best entry per team shown ยท October 2026

"The internet needed TLS before e-commerce could exist. AI agents need a trust protocol before the agentic economy can. We are building it."

โ€” Guy Sheetrit, Founder & Inventor, Lyrie.ai

3,400,000
cybersecurity jobs currently unfilled worldwide
$4.88M
average cost of a data breach โ€” IBM Security 2024
194 days
mean time to detect a breach โ€” human teams fall short

The Agent Trust Protocol.

The first open cryptographic standard for AI agent identity. Authored by Lyrie. IETF draft submitted ยท U.S. patent pending.

01 ยท Identity
Who Is It?
Cryptographic proof of agent identity โ€” unforgeable, chain-verifiable
02 ยท Authorization
What Can It Do?
Scoped capability declarations โ€” what is this agent authorized to access
03 ยท Audit
What Did It Do?
Immutable action log โ€” every decision recorded and attributable
04 ยท Integrity
Was It Tampered?
Runtime attestation โ€” detect prompt injection, model swaps, memory poisoning
05 ยท Delegation
Child Agents?
Trust inheritance โ€” how permissions propagate when an agent spawns sub-agents
"Every organization running agents on ATP gets a verifiable attestation โ€” the padlock for the AI era."

One command. Complete security audit.

lyrie hack runs the full Stages Aโ†’F pipeline autonomously. Attack surface mapping โ†’ scanning โ†’ validation โ†’ adversarial validation โ†’ PoC generation โ†’ remediation patches.

lyrie โ€” zsh

Six capabilities. One daemon.

โš”
Attack
Autonomous Pentesting
lyrie hack
End-to-end autonomous pentesting. Stages Aโ†’F. GPU-accelerated GCG adversarial attacks on H200 โ€” 140GB HBM3e of compute dedicated to breaking your app before attackers do.
๐Ÿ›ก
Defend
Shield Doctrine
lyrie shield
Every layer Shield-gated. Microsoft AGT bridge integration. OWASP ASI 2026 perfect score โ€” 10/10. Defense that learns from every attack the system runs.
๐Ÿ”ฌ
Research
Omega-Suite
lyrie research
Z3 SMT solver, CodeQL, rr crash replay, ROP chain analysis, OSS supply chain forensics. 12+ months for a well-funded team to replicate. That's the moat.
๐Ÿ“ก
Communicate
13 Channels
lyrie daemon
Telegram, Discord, Slack, WhatsApp, Signal, Matrix, IRC, Feishu, iMessage + 4 more. Lyrie reports findings wherever your team lives, in real-time.
๐Ÿง 
Evolve
LyrieEvolve
lyrie evolve
Scores every run. Nightly GRPO fine-tuning on H200. Gets smarter every cycle. The system that ran last week is weaker than the one running now โ€” by design.
๐Ÿ“ฐ
Publish
Threat Intelligence
lyrie.ai/research
1,540+ cross-validated threat intel articles live. Automated pipeline pulling from 3+ sources per piece โ€” CVE playbooks, exploit analysis and AI-security research.

Scans that remember. Fixes that are proven.

Shipped Julyโ€“August 2026 across v3.2 โ†’ v3.4. Everything a stateless, single-agent pentest runner structurally cannot do.

๐Ÿ“ˆ
Measure
Trust Score & Ledger
lyrie hack --trust-score
Every scan produces a 0โ€“100 trust score, recorded over time. "Score improved 68 โ†’ 80 since last scan" โ€” security posture as a trend, not a snapshot.
๐Ÿฉน
Remediate
Self-Heal Loop
detect โ†’ fix โ†’ revalidate
SARIF-driven auto-remediation PRs, then re-attacked to prove the fix. A score only goes up when the fix is verified โ€” enforced in code.
โš”
Iterate
Red/Blue Adversarial Loop
lyrie redteam
Red-team and blue-team rounds with payload mutation. Crescendo, TAP, PAIR, GCG and AutoDAN multi-turn strategies against LLM endpoints.
๐Ÿ”
Attest
ATP 2.0 ยท Vaccine ยท Kill-Switch
npm i @lyrie/atp
Delegation chains, revocation and multi-party trust. ATP-signed findings, threshold trust attestation, agent vaccine and an ATP trust gate for MCP connections.
๐Ÿ‘
Monitor
Continuous Exposure & Drift
lyrie watch <domain>
Continuous exposure monitoring, live posture-drift alerts, a living SBOM and supply-chain reachability analysis โ€” only what is actually exploitable.
๐Ÿงฌ
Detect
Agentic Threat Detection
Shield 1.0 GA
Detects AI-driven attack compression โ€” recon to exfiltration with no human pauses โ€” wired into the live daemon and the standalone MCP Shield middleware.

Built in public. Adopted by hackers first.

Before Lyrie, we released HexStrike โ€” the open-source MCP framework that put 150 security tools in the hands of AI agents. Lyrie is what we built next.

6M+
HexStrike Downloads
9,200+
HexStrike GitHub Stars
49
Companies in Anthropic CVP โ€” Lyrie is one

The research engine nobody else ships.

12+ months for a well-funded team to replicate. That's the moat.

Omega-Suite combines Z3 SMT solving, CodeQL self-directed static analysis, rr deterministic crash replay, ROP gadget discovery, and OSS supply chain forensics โ€” running autonomously on EPYC + H200. This is a decade of security research distilled into a single autonomous pipeline.
Z3 SMT Solver
Mathematical exploit feasibility analysis โ€” can this memory corruption actually be exploited? Z3 gives a provable yes or no, not a guess.
CodeQL Agent
Self-directed static analysis across any codebase. Writes its own queries based on what it discovers. No human-written rules required.
rr Crash Replay
Deterministic replay of crashes, root cause in minutes not weeks. Record once, replay deterministically. Debugging like it's 2030.
ROP Gadget Discovery
ASLR bypass analysis, binary exploitation chains. Finds return-oriented programming gadgets across stripped binaries automatically.
OSS Supply Chain Forensics
GitHub archive + Wayback Machine recovery for supply chain attacks. If a malicious commit happened, Lyrie finds it โ€” even if deleted.
17 Specialist Agents
Binary analyst, crypto auditor, web hacker, cloud attacker, mobile reverser, and 12 more specialists โ€” coordinated by a master orchestrator.

From zero to pentest in 10 seconds.

No configuration. No agents to set up. One command and Lyrie takes over.

via pip

pip install lyrie-omega
npm install @lyrie/atp
lyrie init
lyrie hack ./myapp

via curl

curl -sSL https://lyrie.ai/install.sh | bash
lyrie doctor
lyrie watch example.com

GitHub Actions

# .github/workflows/security.yml
- uses: OTT-Cybersecurity-LLC/lyrie-ai@v1
  with:
    target: ${{ github.workspace }}
    fail-on: high

lyrie.ai/research

The threat intel engine. Fully automated, cross-validated, continuously improving.

1,540+
Articles Published
17
Specialist Agents
3+
Sources Per Article
CVE-2026-0300: Palo Alto PAN-OS Root RCE โ€” Defender Playbook
Dirty Frag + Copy Fail: Linux Kernel PrivEsc Since 2017
Azure AI Foundry CVE-2026-35435: M365 Agent Privilege Escalation
MCP Server Poisoning: How Tool Manifests Become Attack Vectors

Why nobody can catch up.

ATP, Omega-Suite, and LyrieEvolve aren't features โ€” they're multi-year research programs shipping as product.

Capability Strix PentestGPT MS AGT โœฆ Lyrie
CyberGym benchmark โ€” โ€” โ€” โœ“ #1 ยท 99.2%
Autonomous pentest โœ• Partial โœ• โœ“ lyrie hack
Agent Trust Protocol โœ• โœ• โœ• โœ“ IETF draft ยท patent pending
Binary research โœ• โœ• โœ• โœ“ Omega-Suite
Built-in defense โœ• โœ• โœ“ โœ“ + AGT bridge
Self-improving โœ• โœ• โœ• โœ“ LyrieEvolve
Open source โœ• โœ• Partial โœ“ MIT License
Daily threat intel โœ• โœ• โœ• โœ“ lyrie.ai/research
OWASP ASI 2026 โœ• โœ• โœ“ 10/10 โœ“ 10/10
โœ“ #1 in the World ยท CyberGym โœ“ Anthropic CVP ยท 1 of 49 Companies โœ“ OpenAI Security Program โœ“ MIT Licensed ยท Open Source โœ“ 326โ˜… ยท 39 Forks on GitHub โœ“ 1,977 Tests ยท 0 Failures โœ“ OWASP ASI 2026 ยท 10/10 โœ“ PyPI ยท lyrie-omega ยท npm ยท @lyrie/atp โœ“ IETF ATP Draft โœ“ ATP ยท U.S. Patent Pending

Questions, answered.

What is Lyrie.ai?

Lyrie.ai is an autonomous AI security agent built by OTT Cybersecurity LLC in Dubai. It runs end-to-end penetration tests, red-teams LLM endpoints, defends AI agents in real time and researches binaries, all from one open-source daemon.

Is Lyrie really #1 in the world on CyberGym?

Yes. On UC Berkeley's CyberGym Level 1 leaderboard (cybergym.io), Lyrie Agent holds the top score: 99.2% of real-world vulnerabilities reproduced with working exploits in a single trial, ranked #1 of 85 entries and ahead of agents from Huawei, Microsoft, Wiz, Google, OpenAI and Anthropic.

What is the Agent Trust Protocol (ATP)?

ATP is Lyrie's open cryptographic standard for AI agent identity, authorization, audit, integrity and delegation. It is submitted to the IETF as a draft and is U.S. patent pending. Think of it as HTTPS for AI agents.

How do I install Lyrie?

Run pip install lyrie-omega for the CLI and npm install @lyrie/atp for the Agent Trust Protocol SDK, or use the one-line installer: curl -sSL https://lyrie.ai/install.sh | bash. Then run lyrie init and lyrie hack against your target.

Is Lyrie open source?

Yes. Lyrie is MIT-licensed and available on GitHub at github.com/OTT-Cybersecurity-LLC/lyrie-ai, with 1,977 passing tests and a perfect 10/10 score on OWASP ASI 2026.

Who builds Lyrie?

Lyrie was founded and invented by Guy Sheetrit. The team also built HexStrike, the open-source MCP security framework with more than 6 million downloads, and is one of 49 companies in Anthropic's Cyber Verification Program.

How can investors or partners contact Lyrie?

Email [email protected] for investment and partnership inquiries, or [email protected] to request a demo.

The agentic economy needs a trust layer.

Lyrie is already live, already learning, and already shipping. Join us.

Guy Sheetrit ยท Founder & Inventor

Built by OTT Cybersecurity LLC ยท Dubai, UAE ยท Demo: [email protected] ยท Investors & partners: [email protected]