Site appliance
One protected site or a small estate: a single unit receiving web, DNS, firewall and endpoint telemetry, with local storage sized to the chosen retention.
Appliance
A sovereign appliance on your premises.
Customer-owned, closed by default, updated offline, never calling home. The JC!IJB! appliance brings the whole platform onto your premises.
Available in current prototype
Site, enterprise or software deployment, matched to your environment in a technical briefing.
Form factors
Deployment classes
Enterprise appliance
Larger estates: separated sensing, storage and analysis roles, with correlation inside the customer's own domain across sites.
Software deployment
The same platform installed on customer-owned hardware or a customer-controlled virtual environment, where hardware procurement is not wanted.
Network placement
Where it sits decides what it sees and what it can do
| Placement | Visibility and authority |
|---|---|
| Mirror or TAP | Passive copy of traffic. Sees network behaviour without sitting in its path. Cannot enforce on its own. |
| Inline | In the traffic path. Can refuse and throttle directly. Requires fail-open or fail-closed decisions agreed in advance. |
| Gateway | At the edge of a site or web tier. Natural place for refusal, challenge and rate rules. |
| Endpoint | Agents on servers and workstations. Process, file and identity visibility that the network cannot give. |
| Log collector | Reads what systems already record: web, DNS, firewall, identity provider, cloud audit. |
Air-gapped mode
No network path to the internet. Updates and any intelligence arrive on removable media and are verified on the appliance. Full function remains.
Key storage
Secrets held in hardware-backed storage, with secure and measured boot and anti-rollback on updates.
Offline update media
Signed bundles carried in by the customer. The appliance refuses an unsigned, altered or older package.
SOVEREIGN BY DESIGN.
Ask about pilot participation
Tell us about the environment you would deploy into. We will tell you plainly what the platform can see there today and what it cannot.