KHOJ — Methodology Disclosure Axiomaera Threat Index (ATI) — How Your Score Is Calculated PUBLIC DOCUMENT Axiomaera Private Limited | CIN: U62011MH2026PTC467707 | DPIIT: DIPP248013 Registered Office: Shop 8, Upper Ground Floor, Amenity Bldg, Ashok Astoria, Gangapur, Nashik, Maharashtra 422222, India Version: 1.0 | Effective Date: May 10, 2026 | Document Owner: Office of the Managing Director, Axiomaera Private Limited

1. What Is the Axiomaera Threat Index (ATI)?

The Axiomaera Threat Index (ATI) is a proprietary composite score that quantifies your personal data breach exposure on a scale of 0 to 100. It is developed and maintained by Axiomaera Private Limited. The ATI scoring methodology is protected as a trade secret of Axiomaera Private Limited. KHOJ operates on the AIRAVATA compliance infrastructure, which is the subject of Indian Patent Application No. 202521070192. The ATI is: • A quantified measure of your known breach exposure based on available data • A prioritisation tool to help you decide what to fix first • A comparative metric showing where you stand relative to other Indians who have been scanned • Calibrated specifically for the Indian threat landscape, including UPI, SIM-swap, and Aadhaar-linked risks The ATI is NOT: • A credit score or creditworthiness indicator • A prediction of identity theft or future cyberattacks • Legal, financial, or professional security advice • An absolute or scientific measure of risk

2. Data Sources

KHOJ queries the following sources to generate your ATI Score: Breach Metadata: Sourced from Have I Been Pwned (HIBP) under Creative Commons Attribution 4.0 International licence. Provides breach names, dates, record counts, and data classes exposed. Coverage: Approximately 970+ confirmed breaches as of May 2026 (this number increases as new breaches are catalogued by HIBP).

Credential Intelligence: Sourced from licensed breach intelligence providers under commercial API agreements. Provides exposed credentials including passwords, usernames, phone numbers, and IP addresses found in known breach databases. Queried in real-time and never stored on our servers.

What KHOJ does NOT do: • KHOJ does not access any live system, network, device, or account. • KHOJ does not access your current passwords. • KHOJ does not access the dark web in real-time. • KHOJ shows you data that has already been leaked by third parties.

3. Scoring Model

The ATI is computed using a multi-vector composite model that analyses your exposure across multiple independent dimensions. These dimensions include, but are not limited to: Breach exposure — the number, severity, and recency of breaches you appear in, including Indian-origin breaches Credential depth — the nature and severity of leaked credentials, including whether passwords are in plaintext or hashed form Data diversity — the variety of data types exposed across your breaches and whether financial data is involved Contextual risk — temporal factors, breach verification status, and behavioural risk signals such as password reuse Identity exposure — how complete your exposed identity profile is across all breach sources Each dimension is assigned a proprietary weight reflecting its contribution to overall risk. Credential exposure carries the highest weight, as actual leaked passwords represent the most direct and immediately exploitable threat. The specific parameters, weights, calibration constants, and computational methodology are proprietary and confidential, and constitute trade secrets of Axiomaera Private Limited.

4. Score Ranges

The ATI is designed so that a typical Indian internet user with 5–10 years of online activity is expected to score between 40–65, reflecting the widespread reality of data breaches affecting Indian platforms. This calibration range may be refined as scan volume increases.

5. Percentile Ranking

Your ATI Score is compared against all other KHOJ users to produce a percentile ranking. Example: "You are more exposed than 73% of Indians who checked." Percentiles use only anonymised scores. No personal data is involved. Percentiles are displayed after a minimum cohort size is reached and may change as the cohort grows.

6. Limitations

1. The ATI reflects known exposure only. Breaches not indexed by our sources will not appear. 2. The ATI does not measure your current security posture. If you have already changed passwords, your score still reflects historical breaches. 3. The ATI is a snapshot in time and may change as new breaches are discovered. 4. The ATI is not a legal or forensic determination and should not be used as the sole basis for legal, financial, or employment decisions.

7. Intellectual Property

The ATI methodology — including its multi-vector composite model, parameter selection, weight assignments, calibration approach, and India-specific adaptations — is the proprietary intellectual property of Axiomaera Private Limited, protected under applicable trade secret law. The AIRAVATA compliance infrastructure on which KHOJ operates is the subject of Indian Patent Application No. 202521070192. This disclosure provides sufficient information for users to understand what the ATI measures and how scores are classified, without revealing the proprietary details of the computational methodology.

8. Contact

Grievance Officer: Mukund Hemant Mohadikar, Managing Director

---

End of Methodology Disclosure.

This document is referenced by the KHOJ Terms of Service (Section 1.17). The ATI methodology is protected as a trade secret of Axiomaera Private Limited. KHOJ is powered by AIRAVATA, the subject of Indian Patent Application No. 202521070192.