Tools for Sensitive Networks
We build for operators working with sensitive networks. Our experience in those environments shapes the product.
Built From Experience
Air Gap Intel was founded by former ISSOs and system administrators who worked in defense contractor environments. We saw understaffed teams, heavy documentation workloads, and critical knowledge leave when experienced staff moved on.
Most commercial security tools assume reliable cloud access. That assumption does not hold on many sensitive or disconnected networks.
We are applying that experience to BlackBox Analyst, a network detection and investigation product in development for private preview. The current work focuses on local processing, preserved evidence, and practical analyst workflows.
Our Principles
- Local First: Keep sensitive analysis under operator control
- Human Control: Analysts review and approve conclusions
- Operational Fit: Account for real network constraints
- Evidence First: Ground factual claims in observed artifacts
- Clear Status: Separate working features from planned work
Why Design for Disconnected Work?
Operational Constraint
Sensitive environments cannot always depend on a persistent cloud connection. Investigation workflows need a viable local path.
Operator Control
An operator must explicitly configure any future remote-model connection, with a clear account of the data it transmits.
Disconnected Direction
Enterprise packaging is planned to support disconnected deployment and signed offline update workflows.
Review BlackBox Analyst
Read the product details or ask about the private preview.