POT Security · Black Manta
Our own managed security layer, above the firewall. Black Manta reads behaviour, identity and intent — not just packets. Firewalls stop packets. Black Manta stops intent.
The firewall sees packets. Black Manta sees intent.
Our firewalls and operating systems still do their job: ports, packets, known signatures. Black Manta works one level higher and asks what a firewall never asks — who is this really, what is it trying to do, and has it done this before.
It does not replace the firewall. It asks the questions the firewall can’t.
Every request leaves a trail. Black Manta reads it.
More than a dozen detection families, watching every website and mailbox we host. Each one names what it found, with evidence — never a bare score.
Identity before IP
Pretend to be Googlebot from a rented server, and the ranges Google publishes will answer you, not your headers. In fact, we verify crawlers from Google, Bing, Apple, OpenAI, Anthropic and Perplexity against their own published ranges.
BOT.SPOOFED_CRAWLEREvery exploit gets a name
Black Manta matches every exploit you try to its CVE, the day it went public, and whether ransomware crews already use it — weighted by CISA’s known-exploited list and FIRST EPSS, across 6,500+ exact attack signatures.
SCAN.VULN_PROBEAttack rules that know the web
SQL injection, cross-site scripting, file inclusion, remote code execution and scanner fingerprints, read with the OWASP Core Rule Set.
OWASP CRSCredential attacks, across every door
Black Manta follows brute force, credential stuffing and password spraying across WordPress logins, mailboxes, the hosting panel and SSH — one actor, many doors, one story.
AUTH.SPRAYSecurity built for the AI era
It identifies and classifies AI crawlers. It also detects attempts to manipulate our Zeta assistants — prompt injection, jailbreaks, data-leak tricks — and names them against the 186 techniques of MITRE ATLAS.
MITRE ATLASResearchers are not attackers
Black Manta recognises and tags about 90 internet-wide research scanners, across 29,700 published ranges, and never escalates them. We know the difference between a scanner and an attacker.
RESEARCH · TAGGED
Example viewIt tells you what happened. In sentences.
Black Manta groups every signal from one actor into a single incident and writes it up so anyone can read it in seconds.
- Kill-chain view. Each incident shows how far the actor got: scouting, probing, attempting.
- Every decision explains itself. Detection names, the evidence, why, and when it expires.
- Our team marks it right or wrong. Black Manta learns from every call our team corrects.
- One kill switch. One click returns everything to observe-only, instantly. Nobody has needed it.
Our infrastructure gets defended. Our customers get protected.
One managed security engine runs both postures. The difference is how much evidence it needs before it acts.
Infrastructure security
Our control planes and admin doors are not public property. Probing them is an answer in itself.
- Admin and control planes fail closed
- One clear probe is enough to act
- No warm-up, no second chance on our own systems
- Flags any of our servers that contacts a known botnet command server
Customer service security
Your visitors are not suspects. Precision comes before speed, and we never cut off a legitimate visitor to prove a point.
- A challenge before any block
- Two independent signals before a block
- Code protects verified crawlers, partners and our own ranges
- Checks the domains we host against abuse.ch malware lists
- Treats a hacked site as the victim and never blocks it for that
- Alerts our team before it contains anything
9 steps. Most visitors never see the first.
Every response is proportional. The engine climbs one step at a time, and only as far as the evidence goes.
Today, Black Manta runs in detection mode. It watches, names and records what it would have done. Enforcement switches on step by step, only after a false-positive soak proves each step safe.
Game servers, VPN and streams never pay a millisecond for any of this.
On latency-sensitive paths Black Manta is passive: it reads logs and flows and never sits inline. Gameplay, VPN tunnels, live streams and remote desktops keep the exact path they had.
Nothing enters its brain unverified.
New attack types appear every day, so Black Manta pulls 45+ live intelligence sources on its own — and it checks, measures and signs off every update before it runs.
Update brain · liveBlack Manta, answered
What is Black Manta?
Black Manta is Point of Trade’s own managed security and threat detection engine, which we built and run on our own network in Kuwait. It sits above the firewall and reads the behaviour, identity and intent behind traffic, so it can name attacks a firewall cannot see: spoofed crawlers, exploit attempts by CVE, credential spraying and attempts to manipulate AI assistants.
Does it cover my website and email?
Yes. Black Manta watches every website and mailbox we host: website traffic, password guessing against WordPress logins, mailbox and mail-sending logins (IMAP, POP3 and SMTP), and hosting-panel logins. It runs in detection mode today, so it names and records what it finds without blocking anything.
Will Black Manta block Google or my real visitors?
No, and that is by design. We verify search and AI crawlers against the ranges their owners publish, and we write our protected ranges into the code. In addition, customer services always get a challenge first and need two independent signals before any block.
Does Black Manta slow down my website or game server?
No. Black Manta treats game servers, VPN, streaming and remote desktops as latency-sensitive: it only reads their logs and flows and never sits in the path. As a result, everything it does there happens outside your traffic.
Do I need to install or configure anything?
No. Black Manta is managed security that runs on our side of the network, so there is nothing to install on your server, site or device.
Black Manta doesn’t play games.
It watches, it names what it finds, and it answers in proportion. Ask Zeta how our managed security protects the website or mailbox you host with us.