A Singapore-based cybersecurity AI company
UD Works builds Monarch — sovereign, AI-native security that operates at machine speed, on-premise, air-gapped and fully under your control.
Vision
To become the cybersecurity backbone of the autonomous economy.
Mission
To make cybersecurity radically more accessible — automating the work while keeping a human in the loop, across IT, OT and robotics.
Why sovereign, why Singapore
Monarch runs where the data lives. The autonomous economy runs on systems that cannot afford to export their security data. UD Works exists to close that gap. Built in Europe, tuned in Singapore — positioned where sovereignty, regulation and the autonomous economy converge fastest.
Sovereign by design. Human-in-the-loop. Built for IT, OT and robotics.
The approach
Monarch pairs a frontier cybersecurity model (foundation from Alias Robotics) with UD Works' own orchestration, memory, governance, identity and deployment. Level-4 autonomy: AI executes e2e, humans set intent and govern.
Built on proven research
Monarch's intelligence layer is built in partnership with Alias Robotics, a European robotics-security research lab with peer-reviewed publications in adversarial AI, autonomous offensive security and robot vulnerability assessment. The model lineage and benchmark results are published — not marketing claims, but verifiable arXiv citations.
- •#1 on Cybench — the sovereign model solves 25/33 challenges (pass@3), ahead of Claude Code (15), OpenAI Codex (15) and Mistral (10). Published: Mayoral-Vilches et al. (arXiv:2504.06017).
- •Successive model improvements — from 13/33 to 28/33 Cybench solved across the model line, 80%+ of the benchmark saturated. Published: arXiv:2512.02654; arXiv:2601.14614.
- •Honest edges — every category is published, including the two where deep-math challenges still favour human experts on speed. Credible proof includes the limitations.
The foundation is peer-reviewed. The integration — orchestration, memory, governance, identity, deployment — is UD Works' own engineering, built to turn research-grade capability into an operational security platform.
Regulatory jurisdictions
Monarch is designed at the intersection of the regulatory frameworks that matter most to security buyers in APAC and Europe:
PDPA (Singapore)
Singapore's Personal Data Protection Act governs data handling, consent and breach notification. Monarch's zero-export architecture means personal data never leaves the customer's environment.
GDPR (EU)
The General Data Protection Regulation requires data minimisation and lawful cross-border transfer. Air-gapped deployment eliminates cross-border transfer entirely; cloud deployments offer EU-region data residency.
NIS2 (EU)
The Network and Information Security Directive requires incident reporting, supply-chain risk management and evidence-based security controls. Monarch's non-repudiable audit trail and 126 compliance controls address NIS2 requirements by architecture.
EU AI Act
The EU AI Act imposes transparency, governance and risk-management obligations on AI systems. Monarch's governance runtime — policy enforcement on every action, PII redaction, prompt-injection blocking, full audit logging — provides the technical controls the Act demands.
UD Works is positioned where these frameworks converge — building for buyers who must satisfy multiple jurisdictions simultaneously.
Why Singapore
Singapore sits at the centre of APAC's security market — the region with the fastest-growing demand for sovereign AI cybersecurity. The city-state combines proximity to government and defence buyers across Southeast Asia with a regulatory environment that takes data sovereignty seriously.
For UD Works, Singapore provides direct access to the buyers who need sovereign security most urgently: defence ministries, critical-infrastructure operators and financial institutions across ASEAN, ANZ and the Middle East. It also sits at the regulatory convergence point — PDPA locally, GDPR and NIS2 for European customers, and the EU AI Act for AI governance obligations.
Built in Europe, tuned in Singapore. The model foundation comes from European robotics-security research; the platform engineering, integration and go-to-market operate from Singapore. This dual presence means UD Works builds for both jurisdictions natively — not as an afterthought.
BUILD · VERIFY · VALIDATE CONTINUOUSLY
UD Works Pte. Ltd. · Singapore · [email protected]