01Pharoah Technology · Security & intelligencepartial
SCARAB
A device-security agent for Mac, Android and PC that you own outright — Wi-Fi and network attack detection, data-exfiltration and malware checks, reporting into your own console.
Live · cockpit.pharoahtechnology.co.uk£49 one-off20 parts · 12 probe-verified
Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50)cockpit.pharoahtechnology.co.uk
02What it is
The facts, from the register.
| Product | SCARAB — Pharoah Endpoint Shield |
| Register key | pharoah-scarab |
| Owner | Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50) |
| Live at | cockpit.pharoahtechnology.co.uk · HTTP 200 on 9 September 2026 |
| Price | £49 one-off |
| Built from | 20 register parts, 16 live, 12 probe-verified |
What it does
A device-security agent for Mac, Android and PC that you own outright — Wi-Fi and network attack detection, data-exfiltration and malware checks, reporting into your own console.
Runs on
SCARAB device-posture telemetry (verdict-only, opt-in)
Add-ons release key first-party trust
Pharoah-branded skins — SCARAB / Privacy Audit / Safe Room
scarab android apk
Source: estate register (products, product_parts, builder_blocks) · deploy probe 9 September 2026Evidence live
03The frameWhat this buyer's profession checks
We will measure it against the NCSC Cyber Assessment Framework.
Three checks a buyer in this field applies, whether or not they name the standard. We use them as the frame for everything that follows.
Check 1
Assets and access under control
Check 2
Detection with an evidence trail
Check 3
Response rehearsed, not improvised
Frame chosen by BRG as a summary of the NCSC Cyber Assessment Framework. Verify the wording with the body before external use.No accreditation is claimed
04Why it's better · 1 of 6Check 2 · fit for purpose
The job as the register describes it.
Endpoint security reports posture without proving the device is actually clean.
Source: register pain_pointThe problem, stated plainly
05Why it's better · 2 of 6Check 2 · fit for purpose
What it does instead.
A device-security agent for Mac, Android and PC that you own outright — Wi-Fi and network attack detection, data-exfiltration and malware checks, reporting into your own console.
The parts doing the work
SCARAB device-posture telemetry (verdict-only, opt-in) verified
sanitize() is an ALLOW-LIST projection: ships score/band/finding titles+detail/wifi security TYPE/counts with home paths scrubbed to ~; SSID, process
Add-ons release key first-party trust
Minted pharoah-addons-release.jks (RSA-4096, 30y, vault PHAROAH_ADDONS_RELEASE_*), built assembleGhostwireRelease for scarab/privacy-audit/shield/safe
Pharoah-branded skins — SCARAB / Privacy Audit / Safe Room verified
The pharoah productFlavor of each security app is now branded (was empty; only the ghostwire flavor existed). App names "Pharoah SCARAB / Pharoah Priv
scarab android apk verified
Source registration for scarab-android-apk: android/scarab-android/app/src/main/kotlin/co/pharoah/scarab/ui/MainActivity.kt at f7c830b3ffb67ff96efd6cc
Source: register purpose, public_blurb, product_parts joined to builder_blocks4 of 20 parts shown
06Why it's better · 3 of 6Check 1 · controls
Proof it exists, not a roadmap.
200
HTTP status of cockpit.pharoahtechnology.co.uk on 9 September 2026 · real-content-verified
12/20
register parts verified by probe
HTTP 200
functional surface probe
Open cockpit.pharoahtechnology.co.uk during the talk. Anything the deck claims should be visible there.
Source: register deploy_probe_code, deploy_probed_at, product_parts.verified_by_probeProbed, not promised
07Why it's better · 4 of 6Against the market, honestly
Where we lead, and where we don't.
Category: endpoint detection and response. Nearest rivals: CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint, Sophos Intercept X, Huntress; strongest is CrowdStrike. Our edge: rivals are built to stop the intrusion at the perimeter and grade themselves on prevention; we assume the network attack already succeeded and hunt for what it left behind, which is the posture that matters once an estate is already compromised. How we beat them: assumed-breach by default, and reachable for firms that cannot fund a Falcon contract.
Not independently sourced This verdict was written from an analysis whose only source was the model itself, not scraped competitors (analyst pharoah). Treat the competitor names and positions as a working hypothesis until the market research is re-run; do not quote them to a buyer.
Source: register vs_competitionNamed competitors are the register's, not the presenter's
08Why it's better · 5 of 6Check 2 · fit for purpose
Built for one kind of buyer.
Not in the register yet an audience. This slide stays blank until the register carries it; nothing here is invented.
Source: register audience, serves_nichesOne buyer, not everyone
09Why it's better · 6 of 6Price is part of the scope
What it costs, in one line.
£49 one-off
Buying route
Payment on enquiry
software
Scope named on the next slides, so the price has a boundary
Source: register price_gbp, billing_interval, pricing_basis, payment_link_activeNo hidden rate card
10What's inside
The parts, with their verification state.
| Part | Category | State | Verified |
|---|
| SCARAB device-posture telemetry (verdict-only, opt-in) | full-stack | live_wired | |
| Add-ons release key first-party trust | backend | live_wired | |
| Pharoah-branded skins — SCARAB / Privacy Audit / Safe Room | backend | live_wired | |
| scarab android apk | full-stack | live_wired | |
| scarab posture scheduler | backend | live_wired | |
| scarab / linkbond / android scanner apk | full-stack | built | |
| SCARAB alert watchdog — armed on Phil's Mac (30-min launchd) | backend | live_wired | |
| SCARAB — Android app-risk engine (Phase 1a) | backend | live_wired | |
| SCARAB — firewall verdict engine (no-root firewall brain) | backend | live_wired | |
| SCARAB — macOS local posture scanner (Phase 0) | backend | live_wired | |
Source: product_parts joined to builder_blocks · 10 of 20 shown probe-verified not yet
11Why packaging matters
Bought as a price.
Delivered as a scope.
What the buyer hears
£49 one-off
A number to compare with the last number.
the gap
disputes · churn
unpaid work
What the provider means
A scope
20 parts, some verified, some not, plus everything that is excluded.
Packaging is the instrument that makes the scope as visible as the price.Thesis
12Why packaging matters
Five things a package does that a price cannot.
1Scope becomes visible. The parts are named, so nothing is assumed.
2Boundaries are explicit. What is outside is written down before the first invoice.
3It is auditable. A package is a documented process, which is what the NCSC Cyber Assessment Framework looks for.
4Buyers compare like for like. A referral needs a defined thing to refer.
5Switching fear drops. The move is inside the package, not a project bolted on the front.
Source: BRG packaging doctrine; frame from slide 3Packaging = a compliance instrument
13This packageCut by what each part does
SCARAB, as a package.
full-stack
SCARAB device-posture telemetry (verdict-only, opt-in)
sanitize() is an ALLOW-LIST projection: ships score/band/finding titles+detail/wifi security TYPE/counts with
verifiedscarab android apk
Source registration for scarab-android-apk: android/scarab-android/app/src/main/kotlin/co/pharoah/scarab/ui/Ma
verifiedscarab / linkbond / android scanner apk
Source registration for scarab.linkbond.android-scanner-apk: ghostwire-android/linkbond/src/main/java/com/ghos
verifiedbackend
Add-ons release key first-party trust
Minted pharoah-addons-release.jks (RSA-4096, 30y, vault PHAROAH_ADDONS_RELEASE_*), built assembleGhostwireRele
live_wiredPharoah-branded skins — SCARAB / Privacy Audit / Safe Room
The pharoah productFlavor of each security app is now branded (was empty; only the ghostwire flavor existed).
verifiedscarab posture scheduler
Source registration for scarab-posture-scheduler: agent/install_posture_schedule.sh at f7c830b3ffb67ff96efd6cc
verifiedSCARAB alert watchdog — armed on Phil's Mac (30-min launchd)
Installed PR #6 (claude/scarab-mac-alert-fix-xgpfbc) via install/macos/install_alert_schedule.sh from ~/Docume
verifiedSource: product_parts grouped by builder_blocks.category2 groups
14Anatomy of the packageOn one page · 12 items of work left, filed
A package reads like a control document.
Inside the scope
- SCARAB device-posture telemetry (verdict-only, opt-in)
- Pharoah-branded skins — SCARAB / Privacy Audit / Safe Room
- scarab android apk
- scarab posture scheduler
- scarab / linkbond / android scanner apk
Evidenced, and how
- Live URL probed: HTTP 200 on 9 September 2026
- 12 parts probe-verified
- Functional surface: HTTP 200
- Register row updated with every probe
Outside the scope today · work left
- Phase 0 LIVE (Mac scanner + cockpit posture tile, verified 16 Jul); Android/PC agents and later phases pending
- 8 parts still to verify by probe
- 3 register fields to fill (vs_competition_unsourced, audience, purpose)
Who signs, and where the work sits
- Pharoah Technology Ltd owns the product and the data layer
- 1 build packet proposed · 11 management items pending
- Change log kept in the register
Source: product_parts (inside), deploy and part probes (evidenced), v_deck_work_left (work left; filed to manager_work and build_packets by deck_work_left_sync)One page
15Across the family
Where it hands over.
Anaïs AIgateway.pharoahtechnology.com
Anaïs AI (LLM router / reseller)anaisai.co.uk
Anaïs AI (working app)anaisai.co.uk
Pharoah TechnologySCARABcockpit.pharoahtechnology.co.uk
ATS Résumé Scanner (free)ats.pharoahtechnology.com
Aurora AIauroraai.pharoahtechnology.com
Aurora Guardauroraguard.co.uk
Source: register rows sharing client_key pharoahOne house, many doors
16Close
Three things to take back to your desk.
One
Open the URL on slide 6. Test it before you trust it.
Two
The parts and their verification state are on slide 10.
Three
A package is a compliance instrument, not a price list.
See it live
cockpit.pharoahtechnology.co.uk
Talk to us
via cockpit.pharoahtechnology.co.uk
Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50)Pharoah Technology