03 · Reflexes · the protect organ · SecureMe · safety since 2014
Seeing a risk is worthless if nothing acts.
Reflexes is Helix's protect organ — SecureMe. It guards two surfaces: the people on your floor, and the products the Brain ships. Detect → alert → act in seconds, with a timestamped record that you acted before the incident, not after.
"Most safety systems alert you after the fact — when the harm has already happened. We built SecureMe to alert whoever can act, before the incident becomes a statistic."
Physical worker safety · Cyber / app security
The founding thesis
An alert that reaches a supervisor 20 minutes after a worker is down is not safety. It is a log entry.
The industry built incident management. SecureMe was built for incident prevention — or, when prevention fails, for a response so fast and so documented that the outcome changes. The alert reaches whoever can act: the worker, the supervisor, the nearest responder, simultaneously and in seconds.
Twelve years of safety platform technology. One instinct: act before harm, not after.
Selected for IIGP (India Innovation Growth Programme) — recognised as a high-potential safety innovation. Active Gulf industrial pilot. 12 years of safety platform development.
Before Reflexes
Incident discovered. Alert sent. Response begins.
You know when it happened. You rarely know in time to change it.
With Reflexes
Risk detected. Alert fires. Response is already moving.
Timestamped evidence: you acted before the incident. For the regulator, the insurer, the family.
"Sell the evidence you acted — before the incident, not the post-mortem."
Half A · Physical
Protect the people on your floor.
A wearable on the worker. A supervisor dashboard in the control room. A reflex loop that closes in seconds, not minutes.
Detect
The wearable senses the event: lone-worker down, hazard-zone breach, manual SOS. No manual check-in needed.
Alert
Worker, supervisor, and nearest responder are alerted simultaneously — not sequentially. Seconds, not a chain of radio calls.
Act
Designated responders are already moving when the event fires — triggered by the system, not waiting for someone to notice the radio was quiet.
Record
Every event is timestamped, logged, and one-click-exportable. For the regulator. For the insurer. For the family. Proof you acted before the incident.
Form factor. A wearable on the worker + a supervisor dashboard (SaaS). Hardware is separate from the SaaS subscription.
Indicative pricing (India). Rs 600–1,000 per worker per month for the SaaS layer. Hardware quoted separately. Final pricing subject to deployment scale and configuration.
Half B · Cyber
Protect what the Brain builds.
The Brain ships real products. Reflexes makes sure none of them ship unsafe. Every release passes a security gate before it goes live. Nothing ships until it passes.
Gate check 1
Secret scanning
No API key, token, password, or credential in source code or build artefacts. Gate fails before the secret can reach production.
Gate check 2
Dependency & supply-chain audit
Every third-party package is checked for known CVEs and licence compliance before the release is allowed to proceed.
Gate check 3
OWASP Top 10
Injection, broken auth, XSS, IDOR, misconfigurations — the ten most exploited classes of web vulnerability are checked on every build.
Gate check 4
DPDP / GDPR data-protection review
Personal data handling is reviewed against the Digital Personal Data Protection Act (India) and GDPR before any user-facing release ships.
Gate check 5
CSP & security headers
Content-Security-Policy, HSTS, X-Frame-Options, referrer policy — every HTTP security header is validated before the release is cleared.
Gate result
Pass or block
All five checks must pass. A single finding blocks the release. Fix it, re-run the gate, ship on pass. The gate result is logged per release — auditable.
Physical reflexes protect the people. Cyber reflexes protect the software and the data. The Brain decides and builds; Reflexes makes sure what is built is safe to run. Same organ. Same instinct. Two domains.
Two surfaces · one reflex
Same instinct. Two domains.
Physical reflexes protect the people on your floor. Cyber reflexes protect the software your Brain ships. Detect, alert, act, record — the loop is identical. The surface is not.
Half A · Worker safety
Physical Reflexes
Lone-worker down · hazard-zone breach · SOS
Wearable sensor on the worker
Worker + supervisor + nearest responder — simultaneously
Designated responders move in seconds, not minutes
Timestamped event log — exportable for regulator, insurer, family
You acted before the incident. The evidence proves it.
Half B · Software security
Cyber Reflexes
Leaked secret · vulnerable dependency · data-protection gap · insecure header
Automated security gate on every release
Build fails — nothing ships until the gate clears
Fix the finding; gate re-runs; release only on pass
Gate result logged per release — auditable trail for compliance
Software ships clean. Users are protected by default.
The shared principle. Every safety system Helix touches — floor or software — runs the same reflex: detect the risk, alert whoever can act, trigger the response, keep the proof. Nothing waits for a morning report.
Reflexes → Brain
Safety events don't sit in a log. They drive decisions.
A lone-worker alert from Reflexes feeds into the Brain — Helix's AI COO. The Brain escalates, logs reasoning, and pings the exception. A blocked security gate holds the release queue. Protect and decide, in the same loop.
SecureMe · protect both surfaces
Act before the incident.
Prove it after.
SecureMe protects the people on your floor and the software your products run on. Two surfaces, one reflex, one platform conversation.