Skip to content

Harpócrates

Cybersecurity travels inside each installation: a shield in front of the application and autonomous cyber-defence under human governance.

Built into every platform StrategicNova family

What it does

StrategicNova built-in cybersecurity

Harpócrates is the cybersecurity system built into the StrategicNova platforms. It is not an external service or a security cloud: it lives inside each company's installation and works offline.

It has two layers. A shield in front of the application that recognises and blocks attacks. And autonomous cyber-defence that watches, decides, acts, verifies and learns, always under the administrator's governance: it starts in observe-only mode until the administrator arms it.

The cyber-defence loop

The cyber-defence loop

  1. 01

    Watch

    Signals from the installation itself, traps —decoys, honey credentials and canaries— and a baseline of usual behaviour.

  2. 02

    Decide

    A policy chooses the response, always under the administrator's kill-switch and an autonomy ladder: observe, act reversibly or act fully.

  3. 03

    Act

    Address blocking or rate limiting, session quarantine, connector revocation and blocking, forensic evidence and an incident record.

  4. 04

    Verify

    Checks that the response has had a real effect on the application.

  5. 05

    Record and learn

    Every decision and action goes into a signed, persistent trail, and the experience is kept to improve the policy offline.

Capabilities

Capabilities

Application shield

Attack signatures (SQL injection, XSS, path traversal, command injection), rate limits, automatic address blocking, request size control and security headers.

Chained, signed log

The security log chains fingerprints and is signed: it detects deletions, insertions or modifications.

Installation integrity

A signed manifest of the application shows modified, added or missing files in the console.

Human governance

Kill-switch, autonomy ladder and observe-only start. Quarantines and traps are managed from the administration console.

Incidents and deadlines

It times notification deadlines, raises alerts and drafts the notice. It never notifies any authority on its own: a person decides and files.

Status

Built into NPLStrategic, within its pre-production. The autonomous response acts on the application itself, not on the network, and its known limits are documented and shipped with the installation.