Every data feed in.
One watchful picture out.
Provenance on every observation.

Air picture — cooperative aircraft surveillance

Live airborne tracks and per-area aircraft counts derived from unencrypted aircraft position broadcasts, counted airborne-only and scoped to each area of interest.

The default air feed is licence-clean and commercially permissive; non-commercial and unfiltered aggregators sit behind legal-review gates. Every contact carries its ICAO 24-bit hex and callsign, resolved to a track and screened like any other observation.

LICENCE · ODbL 1.0 · attribution

Maritime picture — vessel self-reporting

Live vessel tracks and distinct-hull counts from VHF maritime transponder broadcasts, terrestrial near-shore and satellite over open ocean.

Vessels are held by their MMSI identity across a sliding window, so a hull is counted once rather than per message. Terrestrial coverage runs live near the coast; satellite AIS extends the picture past the horizon under per-provider terms.

LICENCE · per-provider terms

Earth observation — free scene-tips

A zero-cost baseline that watches public optical and radar catalogues and records when fresh imagery lands over a coverage box, without asserting a detection.

Free imagery is too coarse to count objects, so a scene-tip trips no indicator on its own — it records that fresh optical or all-weather radar exists over the box and can cue high-resolution follow-up. One catalogue contract makes heterogeneous archives searchable by space and time.

LICENCE · open · Copernicus / CC-BY

Commercial imagery tasking — on-demand collection

On-demand high-resolution optical and radar collection ordered over a coverage box through one provider-agnostic tasking boundary and delivered back as scene assets for census.

One tasking boundary brokers many constellations, so cloud penetration, night collection and sub-metre revisit are ordering choices rather than integration projects. Delivered scenes are metered per capture and run straight into the detection census.

LICENCE · commercial · per scene

Geospatial reference — the fixed world

The static context layer — infrastructure, buildings, terrain and administrative boundaries — that every contact and detection is plotted against.

Rail, power, ports, pipelines and aeroways give a track its fixed-world meaning: a vessel alongside a jetty or an aircraft over a restricted field reads differently from one in open space. ODbL attribution is carried onto every derived map product.

LICENCE · ODbL 1.0 · attribution

Identity screening — sanctions, PEP and registries

A consolidated screening set that matches tracked entities — vessels, aircraft, persons and companies — against sanctions lists, watchlists, politically-exposed-person data and company registries.

A vessel MMSI, an aircraft registration or a named person is screened against a consolidated sanctions and politically-exposed-person set and company registries, raising a contact-alert on a match. Approximate name matching absorbs spelling and transliteration drift, so a designated party spelled three ways is still one match.

LICENCE · open lists · public standards

RF signals — passive broadcast pickup

Passively received open radio broadcasts that carry identity and position — drone Remote ID, amateur and mesh position beacons, and navigation-integrity degradation reported by aircraft.

Drone Remote ID surfaces UAS identity, position and operator location for airspace awareness, while aggregated navigation-integrity loss maps likely GNSS-jamming zones. Collection stays inside the lawful-interception boundary (RICA): receive-only on open broadcasts, no decryption.

LICENCE · open standard · receive-only (RICA)

Cyber & infrastructure — attack-surface and threat-intel

Internet-facing infrastructure inventory and community threat-intelligence — exposed hosts, certificates, routing health and indicators of compromise — tied to entities and areas of interest.

Certificate and host inventory maps an organisation's exposed footprint; routing and outage telemetry surfaces connectivity disruption over a region. Indicators of compromise attach to the same entity graph as physical contacts, so a cyber signal and a track can share a subject.

LICENCE · open / community feeds

Conflict & incident events — coded real-world activity

Geocoded political-violence, protest, disaster and incident events, machine-coded from global news and curated datasets, placed on the same picture as live tracks.

Coded events give the coverage box a recent-history layer — where violence, protest or disaster has already occurred — against which live movement is read. News-derived extraction adds near-real-time regional incidents between dataset refreshes.

LICENCE · open datasets · per-source

Ground telematics — cooperative tracking and transit

Trusted, authenticated position reporters — blue-force trackers, fleet and asset devices — plus public transit and rail movement feeds, forming the ground-movement layer.

Own units and assets report position under a per-unit token and render with standards-correct affiliation and echelon, egressed to TAK clients as Cursor-on-Target. Public transit and rail movement add scheduled ground mobility over the same box.

LICENCE · open standard · CoT / GTFS-RT

Social & messaging — open discourse signal

Publicly published social-media posts, forum and messaging-channel content and media-monitoring signal, mined for narrative, mention and geolocation cues over an area or entity.

Public discourse surfaces mentions, sentiment and first-report cues that often precede formal reporting. Collection is limited to openly published content and screened against POPIA before anything is retained.

LICENCE · platform terms · POPIA-screened

Macro & economic context — the operating environment

Slow-moving context signals — fuel and currency prices, grid and energy state, weather and prediction-market odds — that frame why activity over a box changes.

Fuel, currency and grid state explain movement that raw tracks cannot — a fuel run, a port surge, a load-reduction window. Weather and prediction-market odds add a forward-looking probability layer over the picture.

LICENCE · open data · per-source

Community safety — local incident and record

Regional open-record and community-reported signal — official crime statistics, gazettes, local news and community-safety reports — tuned to the South African operating context.

Station-level crime statistics and community incident reports give a neighbourhood its baseline threat picture; gazettes and registration records add the official layer. Positioned for community-watch and private-security operators registered under PSIRA.

LICENCE · official record · PSIRA-scoped

Field device events — sensed at the edge

The ingest contract for field devices reporting discrete events — presence, breach and duress — normalised onto one device-event ledger.

Edge devices register as identities and post events under per-device tokens, so a plate-read or a perimeter break enters the same ledger as any other observation. Covert field modalities — EO-IR, ANPR, acoustic, seismic and RF direction-finding — are detailed on the Sensors capability.

LICENCE · open standard · device tokens