Data sources
- Detection findings
- Customer policy
- Population measurements before activation
Capability
Active defence and controlled interdiction
Guarded, reversible, auditable responses — throttle, challenge, refuse, isolate, revoke — inside infrastructure the customer controls and within a policy the customer approved.
Available in current prototype
Range proposals arrive for operator approval; approved refusals are enforced at the server edge, with an explanation for legitimate visitors.
Operational problem
The problem
Automatic blocking is easy to build and easy to regret. A list imported from a third party can refuse thousands of legitimate users at once; an over-eager rule can disrupt the service it is meant to protect; and an automatic block tells an observer exactly what was noticed.
Workflow
How it works
- The engine proposes; the policy layer decides. The two are separate components with separate permissions.
- Before a blanket rule goes live, its effect is measured on the population it would refuse — by device class and access type — so legitimate users are not swept up.
- Every refusal tells a legitimate visitor what to do next, and names itself as deliberate.
- Every action is logged with its reason, its approver and the means to reverse it.
Actionable outputs
- Range and source refusals
- Challenge and throttle rules
- Isolation and session revocation requests to customer systems
- Complete action audit
Trust boundary
Interdiction acts only on the customer's own infrastructure. JC!IJB! is not an offensive tool and never reaches into third-party systems, retaliates or attempts access to the source.
Benefit
Decisive response without collateral damage to customers, partners or the service itself.
Related
Other capabilities
- Counter-reconnaissance and behavioural detection Available in current prototype
- Threat hunting and historical investigation Available in current prototype
- Intelligence fusion and relationship discovery Available in current prototype
- Attack-path and exposure analysis Available in current prototype
- Forensics, evidence integrity and reporting Available in current prototype
- Sensor reliability, tamper detection and operational health Available in current prototype
SOVEREIGN BY DESIGN.
Discuss this capability
Tell us what you need to protect. A briefing is an engineering conversation; it never needs your credentials, network inventories or logs.