Saolix Technologies · Threat Intelligence Solutions

Saolix F2X. See the pattern before it becomes a loss.

Fraud and risk intelligence being built to connect customers, accounts, transactions and devices: to surface coordinated activity early, explain each alert in plain language, and leave the decision to governed rules.

In development The simulator, sample report and images show the planned design, with fictional data.

01 · Claim

Fraud rarely looks like fraud in one record. F2X is designed to look at the whole pattern.

02 · Story

Many fraud controls judge one transaction at a time, against fixed thresholds. Organised fraud hides in the gaps between records: several accounts opened on one device, money moving in a ring, velocity that only looks strange across customers. F2X is being built to link that activity into a single picture. An AI copilot will explain why a group of events looks suspicious. The action will be decided by governed rules your team owns, and every decision will be recorded so it can be audited later.

03 · Chain

AI connects the dots. Rules decide the action.

F2X is designed on the same principle as Eagle: AI can score and explain, but only pinned rules act.

The F2X decision chain: transaction and device signals, AI linking and explanation, the determinism boundary, a rule-based action, and a sealed audit record F2X · DECISION CHAIN Signalstxn · account · device AI assistslink · score · explain Actiongoverned rules Sealed auditevery decision kept AI ASSISTS · PROBABILISTIC RULES DECIDE · DETERMINISTIC DETERMINISM BOUNDARY
Illustrative concept of an F2X alert: four new accounts share one device and move money in a ring; the copilot explains the pattern and a governed rule holds outbound transfers pending analyst review SAOLIX F2X · ALERT F-20417 ILLUSTRATIVE CONCEPT LINKED ACTIVITY · LAST 36 HOURS Device D-7731 AccountA-4410 AccountA-4417 AccountA-4429 AccountA-4436 cust C-1182 cust C-1190 cust C-1201 cust C-1207 funds moving in a ring shared device RISK SCORE · ADVISORY 0.87 high · ring pattern velocity device reuse COPILOT EXPLANATION Four accounts opened in 36 hours all use one device, D-7731. Funds pass between them in a ring and return to the first account. Consistent with a mule-account pattern. advisory only · cannot take action RULE DECIDES Hold outbound transfers rule R-12 v4 · pending analyst review audit row sealed · verifiable

Illustrative concept: how an F2X alert is designed to look. All identifiers are fictitious.

04 · Capabilities

What F2X is being built to do.

01

Linked activity

Will connect customers, accounts, transactions and devices, so patterns that span many records become visible as one.

entity graph · shared devices
02

Real-time and batch

Will score activity as it happens, and re-examine history in batch when new typologies emerge.

streaming · retrospective
03

Agentic investigation copilot

Will explain each alert in plain language, grounded in the linked evidence, so analysts start from the reason, not a score.

advisory · never acts
04

Governed action

Holds, blocks and escalations will come from versioned rules your team owns, and every decision will be kept for audit.

pinned rules · sealed audit
05 · Deployment

Designed for your infrastructure.

F2X is designed to follow the same deployment model as Eagle.

On-premiseDesigned to run inside your own data centre, next to the systems it watches.
Local AIThe copilot is designed to run on a locally hosted model, with no data sent to an external AI service.
Customer-controlledYour rules, your thresholds, your audit trail.
Contact · Saolix GroupPeople. Products. Possibilities.

Your next chapter.
Let’s build it together.

Explore a product, discuss a project, or find the right expertise. Tell us where you want to go. We’ll help you take the next step.

Enterprise softwarePrivate AIEngineering & consulting