Defence
Information advantage, at any scale
Black Forest organises multidomain sensor and intelligence data as a living network of relationships across time, so people and algorithms can connect the dots at mission tempo rather than after the fact.
O(1)
Constant time access. Performance holds as the data set grows.
1 Gbps
Demonstrated indexing rate on a pair of commodity cloud servers.
Sovereign
Deployed where you require. You retain ownership and control of your data.
The constraint is no longer collection. It is organisation.
Our defence customers tell us that achieving information advantage requires the ability to organise massive quantities of complex information. The computer science of the 1970s is not up to that challenge. Conventional architectures were designed when data was smaller and slower, and they degrade exactly when volume and tempo rise.
The result is familiar. Sensor feeds land in separate systems, correlation happens hours later or not at all, and analysts spend their time assembling a picture rather than acting on one. New computer science that can organise multi dimensional data in constant time changes what is possible.
Defence
One infrastructure beneath the applications your people already use, holding sensor, intelligence, logistics and cyber data together rather than in separate stacks.
Common operational picture
Multidomain data, fused as it arrives
Fuses sensor and intelligence data across the battle space into a real time picture, indexed on arrival rather than in overnight batches.
Correlates across time, place, entity and relationship in one query, so movement, pattern and anomaly surface together.
Shared sovereignly with partners and allies, releasing only what should be released.
Intelligence and effects
Connect the dots across sources
Petabyte scale knowledge graphs linking events, entities and relationships, built on a transactional engine so the graph stays current.
Fast traversal between timeline and graph, so activity in one source can be checked against another over the same window.
Provenance and attribution preserved, so any conclusion can be traced back to the observation that produced it.
Cyber and networks
Real time and forensic together
Correlate logs, alerts, identities and network telemetry as they arrive, at the volumes defence networks actually generate.
Retain years of history in low cost storage and still query it, so investigation is not limited by what was affordable to keep hot.
Combat cloud and edge
Works where the mission is
Runs on premises, at the edge or in a sovereign cloud, on commodity hardware, with Docker and Kubernetes.
Designed to keep functioning in degraded or disconnected conditions with partial data availability.
Support and readiness
Sustainment as a data problem
Correlate platform telemetry, maintenance records and supply data to anticipate failure rather than react to it.
Understand availability and readiness across a fleet without waiting for a monthly return.
AI enablement
Context models can be trusted with
Delivers selective, connected context to models rather than bulk retrieval, improving both output quality and cost.
Source attribution and auditability preserved, which is the difference between an answer and an answer you can act on.
Intelligence analysis
Adversaries operate as networks of people, organisations, infrastructure, money and communications. Understanding those relationships is the difference between logging isolated events and recognising a coordinated campaign. Black Forest holds those relationships as a live knowledge graph connected across time, at a scale where analysis usually stops being affordable.
Adversary networks
See the network, not the incident
Surface indirect associations that keyword search will never return, several hops from the starting point.
Track how a network changes over time, because the graph is transactional and current rather than rebuilt overnight.
Hybrid threats
Correlate across domains
Hostile activity deliberately spans cyber, finance, influence and criminal domains so that no single dataset reveals it.
Query across all of them together to expose coordinated activity against critical national infrastructure.
Cyber forensics
Connect infrastructure to actors
Link malware, infrastructure, identities, devices and indicators, then follow shared infrastructure between campaigns.
Keep years of telemetry queryable in low cost storage, so attribution is not limited by retention budgets.
Insider risk
Patterns, not single events
Insider activity rarely looks suspicious in isolation. It emerges from behaviour, access and association viewed together over time.
Correlate personnel, access and operational data with fine grained control over who can see what.
Threat finance
Follow the relationships
Trace funds across organisations, intermediaries and jurisdictions, and connect financial activity to operational intelligence.
Traverse ownership and control structures to expose facilitators that sit behind several layers.
Pattern of life
Time and place, together
Move between timeline, map and graph in one query, because time series, geospatial and graph share a single index.
Establish what is normal for an entity so that deviation becomes detectable rather than merely visible.
Infrastructure, not another analyst tool
Most graph analysis platforms are applications with a database underneath, and they inherit that database's limits. Depth of traversal, size of graph and freshness of data all become compromises once holdings reach petabyte scale.
Black Forest sits at the layer below. It is the knowledge infrastructure that link analysis tools, dashboards and AI systems can be built on, reached through open interfaces including REST, SQL and SPARQL. Your analysts keep the tools they know, and those tools stop being constrained by what the data layer can afford to answer.
Assured, and straightforward to buy
The questions that usually follow a capability conversation, answered in one place.
Credentials and commitments
JOSCAR registered, Defence Cyber Certification at Level Zero, Cyber Essentials and Cyber Essentials Plus certified, a signatory of the Armed Forces Covenant and holder of the Employer Recognition Scheme Bronze Award.
Members of ADS and the Air and Space Power Association, and a sponsor of service sport.
Procurement routes
UK: Crown Commercial Service G-Cloud 15, Constellia under the NVFI route, or direct with Craxel UK Ltd.
US: assessed as Awardable through the Tradewinds Solutions Marketplace, with Carahsoft and 4xBolt as reseller routes.
Security and export control
Zero trust foundation, secure by design and memory safe, with fine grained access control and searchable encryption inside the engine.
Self-classified under the US EAR as ECCN 5D992.c and No Licence Required against the UK Strategic Export Control Lists.
Talk to us about your programme
Whether you are a prime, a systems integrator, an agency or an end user, we can move quickly through the usual assurance steps.
Speak with our team
