Technology Partners

🤖 AI & Local Inference

Ollama — Local LLM inference engine. Shadow313 uses Ollama as the default AI backend for threat triage, CVE analysis, and natural language querying of findings.

Models: llama3.2:3b, mistral:7b, codellama:7b, shadow313-nexus (custom)

🔐 Post-Quantum Cryptography

pyspx — SLH-DSA (FIPS 205) signing for 313-BIND receipts. liboqs — ML-KEM-768 and ML-DSA-65 (planned Q4 2026). pycryptodome — AES-256-GCM symmetric layer.

🌐 Threat Intelligence

FIRST.org EPSS — Exploit prediction scoring. CISA KEV — Known exploited vulnerabilities. FeodoTracker — C2 botnet tracking. URLhaus — Malicious URL feeds. OTX — AlienVault Open Threat Exchange.

🐳 Container & CI/CD

Docker — Container scanning and CVE sandbox. GitHub Actions — CI/CD pipeline with SARIF 2.1.0 output. Trivy / Grype — Container vulnerability scanning. Bandit — Python SAST.

📊 SIEM & Observability

Splunk HEC — HTTP Event Collector integration. Elasticsearch — Bulk API for findings. Wazuh — REST API integration. Sigma — Rule format export for any SIEM.

🛰️ Satellite & RF

VSAT Ground Segment — TR-069 CWMP auditing, firmware integrity, RF telemetry analysis. Citron Tree BMD — Ballistic missile defense simulation. SatExpert TSI — Tactical satellite intelligence.