04:02:13ZLOW
A vehicle stops where no vehicle should.
A camera the site already owned sees a vehicle dwell on the access road, hours after the last authorized visit. On its own this is nothing: a note, not an alarm. EXCOM logs it and keeps watching.
This page is one incident, replayed at reading speed.
Twenty-nine minutes at an electrical substation, the way EXCOM presented them to the operator on duty. Scroll the way the night unfolded.
04:09:51ZELEVATED
Seven minutes at the fence line.
A person leaves the vehicle and holds position beside the west fence. Behavior, not pixels: presence, duration, and place, measured against how this site normally moves at four in the morning. Severity rises, and the reason is written down.
04:12:07ZCRITICAL
The perimeter is crossed at the transformer yard.
Three observations, one story. EXCOM correlates the vehicle, the loiter, and the crossing into a single scored incident with the full timeline attached, so the operator triages one developing situation, not a queue of disconnected alarms.
INC-0417Correlated cyber-physical incidentCRITICAL
- 04:02:13Z vehicle activity on access road, after hours
- 04:09:51Z prolonged presence at fence line
- 04:12:07Z perimeter movement at transformer yard
Illustrative example.
04:14:40ZOPERATOR
One person acknowledges. Everything is on the record.
The operator acknowledges, investigates, resolves: one picture across every site, with cyber exposure from the partner feed raising physical posture when it matters. Every action lands in a tamper-evident audit trail. At 04:31 the incident closes, before the cut, not after the outage.
What that took from the site: the cameras it already had.
- NDAA §889 / TAA HARDWARE
Software only, built to run on compliant cameras and edge compute you procure.
- NON-BIOMETRIC BY DEFAULT
No facial recognition. Appearance-based continuity, ephemeral by design.
- METADATA-ONLY EGRESS
Raw video stays on site. Only detections, tracks, and incidents leave the edge.
- CUSTOMER-OPERATED
You deploy and operate it. EXCOM has no standing access to your data.
- AIR-GAP READY
Runs fully disconnected on premises when the environment requires it.
- NO VENDOR CLOUD DEPENDENCY
No EXCOM cloud holds your data: your infrastructure or your own government-cloud subscription.
Your sector has its own 04:02.
A briefing walks your operators through the live console against scenarios from your own sector.