NakamaCyberThe showcase
NakamaCyber, an online service run by AI agents.
An online cybersecurity service, in production. Its code, documentation and site are written by code agents; its support, its new exercises, its SEO and its communication are done by the NakamaOS agents. Nothing goes out without approval. It is the showcase for what we install in your company.
The product
Your developers review more code than they write.
Human code, AI assistant code: one single skill. Short assessments on reviewing real code, an explanation with every answer, and a progress report your customers open without an account and without any personal data.
What it is
A growing share of code is written by AI agents; knowing how to review it has become the new job of developers. NakamaCyber measures that skill on real code, family by family of the OWASP Top 10:2025: short review assessments, a score per family, a progress report.
The report holds no personal data and reads in four languages; it is mapped to PCI DSS, DORA, NIS2 and ISO 27001, for your customers and your auditors. Free for up to ten developers.
Read on nakamacyber.com on 23 September 2026; that site is the authority.
Why a CIO or a CISO would use it
- Because a growing share of code is proposed by an assistant, and the skill that counts is no longer writing but reviewing.
- Because a customer, an auditor or an insurer asks for proof, and an attendance sheet from a training course is not one.
- Because the report attaches to what they already have to keep up: PCI DSS, DORA, NIS2, ISO 27001.
How it works
- 1
You create the company account
Two minutes: the company name, the declared headcount, and the invitation link. No connector to install, no access to your code.
- 2
Your developers take an assessment
Twenty review questions on real code, at the chosen level — beginner, intermediate, expert — in nine languages. Every answer is explained, right or wrong.
- 3
You share the report
Participation, progress, coverage family by family and the mapping to PCI DSS, DORA, NIS2 and ISO 27001. The link opens without an account, expires when you decide, and can be revoked.
What’s inside
- questions per assessment, drawn from a bank kept up to date
- 20
- levels: beginner, intermediate, expert
- 3
- OWASP Top 10 families, all covered
- 10
- languages: JavaScript, TypeScript, Python, C#, Go, Java, PHP, SQL, YAML
- 9
- interface languages: French, English, Spanish, Portuguese
- 4
- personal data in the shared report
- 0
Read on nakamacyber.com on 23 September 2026; that site is the authority.
Who does what, without employees
Each function of the product has its agent, its rule and its approval. The same NakamaOS as in your company, on a product in production; every figure we publish comes with its source.
| Function | Who does it | What the agent does | Approval |
|---|---|---|---|
| Development and updates |
| Code agents plan, code, test and write the exercises on a branch; commits written by an agent carry its mark. | Approved before merging, with priority for anything touching authentication or data. |
| Content and communication |
| Communication writes the LinkedIn and X posts, including the announcement of each new exercise; the code agents write the documentation and the site pages. | Approved before publishing. |
| Support |
| Support sorts the tickets and prepares one reply per ticket with the customer’s history; the recurring question becomes a help article. | Approved before going out; escalations, contracts and incidents too. |
| Monitoring and new exercises |
| Every morning, a scheduled task picks up the newly disclosed security flaws; every week, research keeps one, with its source; the code agents write the exercise and its fix. | Every exercise, approved before entering the bank. |
| SEO and site monitoring |
| A mission rereads the site pages in the built-in browser, follows the queries where they should appear, picks up broken links and keeps its dashboard in a note. | Every fix, approved before going live. |
| Figures |
| Analytics keeps the week’s counters, each with its source. | Approved before publishing. |
Everything is done by AI agents; nothing goes out without approval.
The real case
How NakamaCyber runs
An online cybersecurity service, in production, run by the same agents; one person approves. Developers train there to spot security flaws in code.
-
Build-in-public posts and blog articles
Marketing Lead — Noa
Research Lead — Leo
The Marketing Lead draws from the week the LinkedIn and X posts and the blog articles: what was delivered, what broke, what was learned.
-
Stripe payment follow-up
Analytics Lead — Sage
Chief of Staff — Nakama
Numbers follows subscriptions and Stripe payments, and flags a failed payment; the reminder is prepared.
-
Support
Support Lead — Iris
Knowledge Keeper — Otto
Each request goes to the Support Lead, which prepares the reply with the customer’s history; the recurring question becomes a help article.
-
E-mails and meetings
Inbox Lead — Mira
Meetings Lead — Kai
The inbox sorts and prepares replies; every meeting has its brief before and its minutes after.
-
The new exercises
Automations Lead — Ada- Research Lead — Leo
- Code agents
Every morning, a scheduled task picks up the newly disclosed security flaws; every week, the Research Lead picks one, with its source; the code agents write the exercise and its fix.
-
SEO and site monitoring
- Automations Lead — Ada
- Code agents
A scheduled task rereads the site’s pages and follows the searches where they should appear; the code agents prepare the fixes.
Approved Every post, every article, every reply, every exercise, before it goes out.
See all the automations