# Shamash

> Shamash is Uruk's cybersecurity unit. We build security by understanding how systems fail.

Shamash combines cybersecurity software and hands-on systems work across four areas:

- Local AI security: deterministic, offline security software that evaluates prompts, retrieved content, tool calls, and model outputs for injection, jailbreak, exfiltration, and related signals. Its local AI security is used by qutu.
- Reverse engineering: evidence-driven investigation of opaque hardware, firmware, embedded systems, boot chains, storage, interfaces, recovery paths, and runtime behavior.
- Cybersecurity infrastructure: testable, auditable, and recoverable security systems, including adversarial testing, vulnerability applicability checks, audit trails, release gates, and verified recovery.
- Ongoing research: practical work on undocumented systems, local AI hardware, automated jailbreak testing, and data recovery. Research is valuable when it becomes a repeatable capability.

Shamash is one defense layer, not a complete authorization, sandboxing, data-loss prevention, or incident-response system. Deployments still require least privilege, authorization, audit logging, and incident response.

## Products and work

- [Shamash overview](https://shamash.uruk.space/index.md): Capabilities, operating boundary, and official links in readable Markdown.
- [Why Shamash](https://shamash.uruk.space/projects.md): Operating thesis and ongoing work in readable Markdown.
- [Shamash documentation](https://shamash.uruk.space/docs.md): Installation, protection points, configuration, and security boundaries in readable Markdown.

## Company

- [Shamash website](https://shamash.uruk.space/): Official cybersecurity product and services website.
- [uruk](https://uruk.space/): The company behind Shamash.
- [LinkedIn](https://www.linkedin.com/company/uruk-space): uruk on LinkedIn.

## Contact

- [Test your security](mailto:admin@uruk.space): Request a Shamash implementation, investigation, or security architecture.