06 Ap APC Network Sovereignty

BlackBox | APC  ·  Air Packet Controller  ·  Enterprise

Every packet logged.
Every certificate sealed.
Every connection accountable.

Global Network Sovereignty  ·  Court-Admissible  ·  Sovereign-Deployable

APC is the command layer for organisations that operate across borders, jurisdictions, and threat environments too complex for conventional SIEM. Multi-continent visibility. Forensic-grade evidence. Compliance on demand.

0 Packets / Session
9 Intelligence Views
5 Compliance Frameworks
38 Controls Assessed
<10s Report Generation
Arrange a Demonstration View Full Suite
Scroll

BlackBox APC · Live Preview

See It Running

Every packet. Every connection. Every anomaly. Visible before it becomes a breach.

BlackBox|APC
Air Packet Controller
Networks
Office LAN
Site Network A
Site Network B
VPN Gateway
Alerts
Critical (2)
Warning (7)
Clear (14)
Live Stats
4,284 pkts/s throughput
⚡ ACTIVE ALERT — Site Network B
Anomalous outbound upload · 192.168.2.44 → 194.87.12.3 · 2.3 GB at 02:34
ISOLATE
TIME SOURCE DESTINATION PROTOCOL SIZE STATUS
02:34:18 192.168.2.44 194.87.12.3 (unknown) HTTPS/443 2.3 GB ↑ ⚠ FLAGGED
14:22:44 192.168.1.12 8.8.8.8 (Google DNS) DNS/53 0.4 KB ✓
14:22:41 192.168.1.5 outlook.office365.com HTTPS/443 84 KB ✓
14:20:09 192.168.2.31 185.220.xx.xx (TOR) TCP/9001 12 KB ! WARN
📡
Real-Time Monitoring
Every packet on every network you manage — logged, categorized, and searchable. No gaps in visibility.
🚨
Anomaly Alerts
Off-hours transfers, unknown destinations, and bulk uploads trigger instant alerts — not post-mortem reports.
🌍
Multi-Site Coverage
Monitor office networks, construction site Wi-Fi, remote VPNs, and cloud traffic from a single console.

System Architecture

Nine views. One forensic chain.
From every packet to the courtroom.

APC ingests telemetry from workstation agents deployed anywhere in the world, seals every event into a cryptographic chain, and surfaces the intelligence through nine purpose-built analytical views — from global topology to court-admissible compliance reports.

◈ FORENSIC CHAIN APC CORE Air Packet Controller INGEST SERVER SIEM PIPELINE WORKSTATION WINDOWS SERVER LINUX ENDPOINT macOS DOCUMENTS FILE WATCH RESILIENCE OFFLINE Q 01 TOPOLOGY Global Map 02 PACKET Traffic Intel 04 FORENSIC Sealed Chain 05 ENTITY Link Analysis 08 GEO Analytics 09 COMPLIANCE Auto-Report 03 THREAT Monitor

Core Capabilities

Everything a global operation
needs to stay sovereign.

APC is not a log aggregator with a dashboard bolted on. It is a sovereign intelligence platform — built from the packet up, sealed at every layer, and designed for environments where the evidence has to hold up.

◎
Global Topology — Live Arc Map
Real-time arc particle map across all registered sites. Three projection modes: Mercator, Winkel Tripel, Gall-Peters. Every pinned site persists across projection switches. Site roster with online/offline status, latency, and event-per-minute rates.
Multi-Continent · 3 Projections · Live Arcs
⬡
Forensic Chain — Court-Admissible
Every event sealed into a SHA-512 cryptographic chain. ChaCha20-Poly1305 encryption at rest. MITRE ATT&CK v15 enrichment across 45+ protocol and port mappings. Kill chain phase, IDS signatures, IOC extraction. Export as a tamper-evident .apcr sealed report.
SHA-512 · MITRE ATT&CK v15 · Court-Admissible
◈
Document Provenance — SEAL Engine
SHA-256 fingerprinting of materials certificates, procurement documents, and compliance records. Drag-and-drop seal interface. FORGERY ALERT triggers when a previously sealed certificate reappears with a changed hash. The file never leaves your machine.
SHA-256 · Forgery Detection · Privacy-Safe
▦
Workstation Agent — Any Platform
Deployable to Windows, Linux, and macOS. Windows: 17 Security Event IDs mapped to the Unified Event Format. Linux: journald with syslog fallback. macOS: unified log stream. 10,000-event offline queue with exponential backoff reconnect. Installs as a system service.
Windows · Linux · macOS · 10k Offline Queue
◻
Geo Analytics — Oracle-Style Intelligence
IP geolocation enrichment on every ingest event. Interactive light map with source-IP markers. Country distribution bar charts, event-count table, max severity per location. Filter by log source category. Real-time update as events arrive.
IP Geolocation · Country Distribution · Live
⚖
Compliance Engine — 5 Frameworks
Automated assessment against SOC 2 Type II, ISO 27001:2022, NIS2, NIST CSF 2.0, and CMMC 2.0 Level 2. 38 controls. Each control queries the live forensic chain and returns a pass, advisory, fail, or insufficient-data verdict with evidence entries. Exports a self-contained, SHA-512 sealed HTML report in under 10 seconds.
38 Controls · 5 Frameworks · SHA-512 Sealed

Technical Specification

Built for the operations that
can't afford a gap.

APC runs on the metal or in a sovereign enclave. No cloud dependency. No telemetry home. Every component is auditable.

APC v1.0 · Specification

Chain Cipher
ChaCha20-Poly1305
Chain Seal
SHA-512 · tamper-evident
Doc Fingerprint
SHA-256 · privacy-safe
Threat Intel
MITRE ATT&CK v15 · 45+ mappings
Event IDs (Win)
17 Security Event IDs → UEF
Offline Queue
10,000 events · no data loss
Ingest Protocol
WebSocket · port 4749
Intelligence Views
9 purpose-built analytical views
Compliance
SOC 2 · ISO 27001 · NIS2 · NIST · CMMC
Report Time
Under 10 seconds · any framework
Deployment
On-premises · air-gap · sovereign enclave
Platforms
Windows · Linux · macOS · cross-platform
Map Projections
Mercator · Winkel Tripel · Gall-Peters
Entity Graph
Fruchterman-Reingold · BFS path analysis
Search Backend
Local · Elasticsearch 8.x · MongoDB 6.x
Internet Required
No — fully air-gap deployable

Compliance Intelligence

What a Big 4 firm charges
$200,000 to compile manually.

APC generates it in under 10 seconds — from a live forensic chain that has been logging, sealing, and enriching every event since the moment it was deployed. Every report is court-admissible. Every report is SHA-512 sealed.

SOC 2 Type II · 9 Controls ISO 27001:2022 · 7 Controls NIS2 Directive · 7 Controls NIST CSF 2.0 · 8 Controls CMMC 2.0 Level 2 · 7 Controls
CAPABILITY SPLUNK ENTERPRISE MICROSOFT SENTINEL IBM QRADAR APC
Court-admissible forensic chain ✗ ✗ ✗ ✓ SHA-512 sealed
Air-gap / sovereign deployment Partial ✗ Cloud-required Partial ✓ Full air-gap
Compliance report generation Manual + plugins Compliance add-on Manual ✓ <10 seconds · 5 frameworks
Document provenance / forgery detection ✗ ✗ ✗ ✓ SHA-256 · CERT_HASH_MISMATCH
Global topology map (multi-continent) ✗ Azure map only ✗ ✓ 3 projections · live arcs
Flat-rate sovereign pricing ✗ Ingestion-based ✗ Per-GB ✗ EPS-based ✓ Contract-based
MITRE ATT&CK v15 enrichment ✓ ✓ ✓ ✓ 45+ mappings · built-in
"Every packet logged. Every certificate sealed.
Every connection accountable."

BlackBox | APC  ·  Air Packet Controller  ·  Luminous.Works LLC

Deployment Enquiries

This is an enterprise instrument.
It deserves a proper conversation.

APC is not sold off a pricing page. Every deployment is sized to the organisation — the number of sites, the regulatory frameworks in scope, the threat environment, and the sovereignty requirements. Speak to a representative to establish fit.

For Enterprise Security Teams
Multinational corporations, financial institutions, and critical infrastructure operators requiring multi-continent visibility, court-admissible evidence, and sovereign deployment.
For Governments & Law Enforcement
Ministries, intelligence units, border agencies, and financial crime investigators requiring forensic chain custody, air-gap deployment, and regulatory compliance documentation.
For Construction & Materials
General contractors and megaproject operators requiring subcontractor workstation monitoring, materials certificate provenance, and supply chain forgery detection under Building Safety Act 2022 and NDAA Section 818.
Speak to a Representative View Full Suite

BlackBox APC · Luminous.Works LLC · BlackBox Industries · Patent Pending