Does Defconder run in the cloud?

No. Defconder runs entirely on your own or customer owned infrastructure and can run air gapped if needed. There is no cloud lock-in and no dependence on an external vendor.

What does provable, not just claimed mean?

Critical rules, such as the consistency of classification levels, are not only checked with ordinary code but formally proven with an SMT solver (Z3) before any security relevant access takes place.

What is the current status?

Defconder is in active development. The core architecture and the four modules Sensor Bridge, Verification Engine, Event Log and Ontology Builder are in place and being tested internally. The focus now is the layout and app builder.

What does Defconder cost?

The price depends on scope, industry and operation and is quoted bindingly after a short conversation. Anyone who joins early as a pilot partner helps decide what comes next.

← All projects Deutsche Version

Ontology and situational awareness platform

Defconder

Provable, not just claimed. Sovereign, not dependent.

Defconder is an event sourced, formally verifiable system for situational awareness and data modeling. It runs entirely on your own infrastructure, with no cloud lock-in and no black box, and is the sovereign European alternative in the market for ontology and situational awareness systems.

In active developmentCore architecture in place, internal testing under wayPrice on request

Go to defconder.com →Read the blog post Request a conversation

Go to the domains

Defconder on the web

The dedicated domains (defconder.de in German, defconder.com in English) show the platform in depth: architecture, modules, sovereignty and security, industries and contact.

Defconder is set up individually. A binding quote follows after a short conversation about scope, industry and operation.

Go to defconder.com →defconder.de →

German: defconder.de, English: defconder.com

Building blocks

What makes Defconder different

Core

Ontology Builder

Build industry specific data models visually, link them and secure them with self diagnosis, for agencies, hospitals, industry or security authorities.

Foundation

Event Sourcing

Every change is an immutable event hash chained with SHA-256. State can be reconstructed from the chain at any time, it is never merely asserted.

Verification

AxiomGate and Z3

Classification consistency is not only recommended on the client, it is formally proven by an SMT solver before any security relevant access.

Role system

Clearance levels

Fixed release levels instead of generic RBAC, checked on the server and formally. Sign in with password and TOTP or with phishing resistant passkeys.

Integration

Sensor Bridge

External systems create records automatically via API key, checked with the same clearance logic as any human access.

In progress

Layout and app builder

Build your own forms and dashboards with drag and drop and assemble several applications from a single ontology, without programming skills.

Principles

Five rules that are not negotiable

01
Event sourcing throughout
Nothing is overwritten, not even configuration, ontology definitions or user rights. State is always a projection of the event log.
02
Industry agnostic from day one
The core only knows generic building blocks such as entity types, relationship types, attributes and rules. Industries are swappable domain packs, not special cases in the code.
03
Provable, not just claimed
Critical logic is checked deterministically, hard constraints run through the Z3 solver and return a proof instead of an estimate.
04
Self explaining
Contradictions and risks are detected immediately, explained in plain language and come with a suggestion. No silent failure state.
05
Sovereignty as an architecture decision
Own it, run it, prove it. Runs on your own or customer owned infrastructure, fully without an internet connection if needed.

Positioning

How Defconder positions itself

The point of comparison is explicitly not that Defconder would be better. Established platforms have decades of head start. The point is a different one: a European, sovereign alternative that can be operated entirely on site, without dependence on a single foreign vendor, and that proves its security promises formally instead of merely asserting them.

One core. Every industry.

Domain packs instead of special solutions

The ontology core knows no hard coded industry terms. Industries are swappable domain packs, and the same software already carries several of them in parallel today, without a single line of code difference.

Security agenciesHealthcareEnergy utilitiesIndustry & enterprise

Insight

Excerpts from the current development environment.

Rough architecture

[ Domain Pack A ]   [ Domain Pack B ]   [ Domain Pack C ]
        └──────────────────┬──────────────────┘
                 Ontology definition layer
                            │
                 ┌───────────────────────┐
                 │  ONTOLOGY BUILDER   │
                 └────────────┬──────────┘
                              │
                 ┌───────────────────────┐
                 │       EVENT LOG        │  hash chained, immutable
                 └────────────┬──────────┘
              ┌───────────────┴────────────────┐
   ┌──────────────────────┐        ┌──────────────────────┐
   │  VERIFICATION ENGINE  │        │  PROJECTIONS & VIEWS  │
   └──────────────────────┘        └──────────────────────┘

Build progress

2026-09-19The name is out: the system is called Defconder and is now public, with its own domain, project page and blog post.

2026-09-13Outlook: the four modules above form the foundation, the focus now is a layout and app builder that assembles several finished, end user oriented interfaces from a single ontology core.

2026-09-13Core architecture and all four modules are in place, currently in active development and internal testing.

Background

The in depth blog post

Why I am building Defconder, how event sourcing and Z3 proofs work together, and what exists today and what does not yet, with evidence and sources.

Read the blog post →

Development insights All prices

Questions and answers

Defconder in short

Defconder is an event sourced, formally verifiable system for situational awareness and data modeling. At its core is a visual ontology builder for data models for agencies, hospitals, energy utilities or companies, without the core being programmed for a specific industry.

Inquiry

Ask about Defconder

Send me a short note about the environment in which you need situational awareness or a data platform. I answer personally.