Ithildin builds and deploys the operating systems for Switzerland's most consequential operations.
Fifteen platforms — seven live, five in the pipeline, three coming soon. Each independently licensable, but designed as one stack: shared ontology, shared deployment substrate, shared audit and classification semantics. From link-analysis intelligence to supply chain optimization, built exclusively for Swiss sovereignty.
The operating system for Swiss defense decision making. Ithildin Vanguard gives commanders, analysts, and operators a single integrated environment to fuse signals, plan operations, and execute decisions. Built for the tempo of modern conflict. Designed around Swiss classification frameworks (ISG). Deployable in air-gapped Swiss bunkers.
Integrate
Fuse intelligence, sensor, command-and-control, and logistics data into a single ontology. Aligned with federal intelligence data-handling procedures. Schema-agnostic ingestion. Provenance preserved end to end.
Decide
Common operating picture across echelons. Object-level and link-level analysis. Mission planning, course-of-action comparison, target development, and tempo management — on one surface.
Execute
Decisions become operations. Actions written back to command-and-control systems. Full audit trail. Fine-grained access control by classification, role, and purpose.
Fusing SIGINT, OSINT, and HUMINT into a shared analyst graph.
Drone telemetry correlated with federal threat reporting in real time.
Cyber-incident timeline reconstruction for Kommando Cyber.
Air-gap deployment · diagram
Caption · Air-gap deployment, Swiss-cleared engineers, no foreign supply chain.
Run Switzerland's critical operations as code. Ithildin Core brings the ontology-driven operating system to Switzerland's railroads, energy operators, hospitals, banks, and manufacturers. Replace fragmented dashboards with integrated operations.
Data
Connect every system. ERP, MES, CRM, SCADA, sensor feeds, document stores. In-place, zero-copy, schema-agnostic.
Ontology
Map your operation to objects and actions. Trains, substations, patients, transactions, claims. The semantic layer that makes AI useful.
Applications
Build operational apps on the ontology. No separate analytics, ML, and app teams. One stack, one team, one source of truth.
Critical Infrastructure
Rail, energy, water, telecommunications. Operational visibility across distributed networks.
Financial Services
FINMA-regulated banks and insurers. AML/KYC graph, sanctions screening, market-abuse detection.
Healthcare
Cantonal hospital networks and university hospitals. Clinical operations on the ontology.
Manufacturing
Swiss precision industry and pharma. Production, quality, regulatory submissions integrated end-to-end.
One sovereign AI. On your network. Inside every platform. Enigma runs open-weight and licensed models — including Switzerland's own Apertus — on Ithildin's sovereign compute. No prompts leave your perimeter, no data leaves Switzerland, and the same AI fabric powers every Ithildin product: Vanguard's analysis, Alpine's vision, Aquila's matching, Canvas, Argent, and every other platform in the stack. Full audit trails on every model decision.
Private
Any model — open-weight or licensed — on customer-controlled or Icarus sovereign hardware. Air-gap supported. No foreign publisher, no third-party telemetry. Deployed this way, data never leaves your perimeter.
Governed
Every prompt, response and model decision logged and auditable. Classification-aware, purpose-bound access, FADP by design.
Omnipresent
One OpenAI-compatible endpoint behind every platform — bound to ontology objects via Functions. Agents that act on your operational layer, not chat UIs that dead-end in a conversation.
Tactical edge vision and sensor fusion — on the sensors you own. Alpine runs Enigma's vision models on your cameras, WiFi and IoT feeds at the edge: object detection, behavior and anomaly alerting, line-crossing and presence. Enhanced-vision AR overlays for your own operators run on the same fabric. Raw data stays on your premises; only aggregate events flow into the ontology. Private property only — no public-space capture, no facial recognition.
Detect
AI object and behavior detection on the customer's own camera feeds — vehicles, people, anomalies, line-crossings — classified in real time at the edge.
Fuse
Correlate cameras with WiFi sensing, IoT telemetry, access logs and geospatial layers — and overlay it into AR enhanced vision for the operator on task. One unified picture.
Edge
On-premises inference for air-gapped sites, with results flowing into the Vanguard graph. FADP processor posture by design.
New · WiFi Sensing — presence, motion & occupancy from ordinary WiFi, no cameras →
New · Clearwater — privacy-sealed sensing for cameras & drones; see everything, identify no one →
Build operational apps on your ontology — without code. Canvas is a low-code application builder that lets analysts and operators drag ontology data streams, Enigma AI modules, and visualization widgets into custom operational dashboards and internal portals.
Drag
Visual component palette. Ontology queries, AI agents, KPI cards, charts, maps, and data tables — drag into position.
Build
Compose multi-page applications with tab navigation, conditional layouts, and role-based visibility. No developers required.
Deploy
One-click deployment to tenant namespace. Applications inherit ontology RBAC, classification, and audit semantics automatically.
Swiss tax & compliance, automated. Argent models corporate tax across all 26 cantons and federal direct tax — with OECD Pillar Two (QDMTT), patent box, and R&D incentives built in — and runs a multi-entity finance manager on top. Indicative estimates, not tax advice.
Model
Federal direct tax plus cantonal and communal multipliers for every canton. Capital tax, participation relief, patent box, and R&D super-deduction.
Optimize
Compare effective rates across cantons, model the OECD Pillar Two top-up (QDMTT), and surface best-canton and pillar-3a structuring options.
Consolidate
A multi-entity finance manager: multi-currency positions converted to CHF, cashflow, and group structure — one view across the whole holding.
Sovereign web security, scanned from Switzerland. Aegis grades the outward attack surface of the web estate you own — scanning, hardening, and continuous monitoring, run from Swiss infrastructure. Distinct from Shield's inward compliance perimeter: Shield manages the perimeter you deploy into; Aegis watches the surface you expose.
Scan
Outward attack-surface scanning of your public web estate. A site's security posture, graded in seconds — scanned from Switzerland.
Harden
Findings arrive as concrete, prioritized fixes — hardening guidance for the gaps the scan surfaces, ordered by severity.
Monitor
Continuous monitoring of the same surface. Regressions and newly exposed services are flagged as they appear.
Explore Ithildin Aegis — grading, hardening & continuous monitoring →
Your legacy systems, unified. Nexus bridges the gap between the Ithildin ontology and enterprise systems — SAP, Oracle, Abacus, Bexio. Automated data extraction pipelines transform siloed ERP data into live ontology entities.
Connect
Native connectors for SAP S/4HANA, Oracle, Abacus, Bexio, and any REST/GraphQL/SFTP source. Zero-copy where possible.
Transform
Your data is mapped and kept continuously in sync, with Swiss locale handling.
Sync
Bidirectional. Write ontology decisions back to source systems. Enigma agents trigger ERP workflows and close loops.
Continuous delivery to bunkers. Ithildin Fortress is the autonomous software deployment system that puts updates into connected, disconnected, and air-gapped environments — safely, traceably, and on the cadence Swiss operations require.
Signed
Every release artifact signed by customer-controlled keys. Verification at every spoke. No release applies without an explicit policy match.
Declarative
Constraints describe the world that should exist. The system reconciles toward it. Rollback is the same primitive as roll-forward.
Auditable
Every applied change, every policy decision, every signature check is logged. Compliance reviews need no engineering escort.
Hub-and-spoke · disconnected
Caption · One release. Many environments. No exceptions.
Compliance perimeter, managed. Shield lets Swiss enterprises deploy into infrastructure engineered to FADP, FINMA-circular, and ISG requirements — inheriting our security posture without building their own.
Inherit
Deploy workloads into the hardened perimeter. ISO 27001, ISG, and FINMA-circular controls inherited automatically.
Monitor
Real-time compliance posture dashboard. Automated DPIA generation and data flow mapping against the FADP.
Audit
Self-service evidence portal for external auditors. Pre-packaged bundles for common regulatory frameworks.
Eyes above. Decisions below. Zenith integrates satellite imagery, drone feeds, and geospatial data into the ontology — enabling tactical situational awareness, border monitoring, and infrastructure inspection from a unified command interface.
Task
Direct integration with commercial satellite providers. Task imagery collection, receive, process — within the stack.
Map
Every ontology entity gets a spatial dimension. LV95/CH1903+ native. Interactive terrain with vector tile rendering.
Detect
Temporal change detection on satellite imagery. Construction, movement, environmental shifts — flagged automatically.
Production optimized. Supply chains secured. Forge applies ontology and AI to manufacturing and supply chain management — identifying bottlenecks, predicting disruptions, and optimizing throughput across multi-tier supplier networks.
Map
Multi-tier supplier network as ontology entities. Visualize dependencies, identify single points of failure, model disruption scenarios.
Optimize
Enigma agents analyze production data — bottlenecks, maintenance windows, scheduling. Constraint-based optimization with LLM reasoning.
Secure
Continuous supplier risk assessment. Financial health, geopolitical exposure, compliance, delivery performance — scored in real time.
The data center, distributed into Swiss homes. Hearth places sealed, silent, direct-liquid-cooled GPU nodes in new-build homes and apartments at build time — each one a node in Ithildin's sovereign compute fabric. The node's 60–65 °C cooling loop feeds the home's hot water (free, all year); a billing-accredited submeter reimburses the homeowner's electricity at their local tariff, plus credits and a monthly stipend. Target program — first nodes in pilot.
Deploy
Sealed, silent direct-liquid GPU nodes installed at build time with partner homebuilders and property managers, plumbed to the hot-water tank and metered through the smart panel.
Aggregate
Orchestration fuses hundreds of residential nodes into one schedulable pool — sold as batch and inference capacity to cloud and AI customers in CHF, under SLA with Swiss data-sovereignty clauses, workloads sealed in confidential enclaves.
Return
Waste heat becomes the home's hot water — a free byproduct, not a heat-pump replacement. Homeowners are reimbursed for the node's power at their local tariff, plus credits and a stipend. Encrypted at rest and in transit, remotely managed.
Sovereign compute, powered by the sun, federated across the country. Icarus is the national sovereign-compute fabric: utility-scale solar and storage on brownfield and industrial sites feed clustered compute that reuses its waste heat and flexes the grid. One scheduler federates Icarus core sites, Hearth home nodes and Aquila edge inference into a single Swiss-soil pool. Owned hardware, no foreign parent, open weights — sovereignty by structure, not by label. Core sites on the roadmap; the scheduler runs today on Swiss GPU.
Power
Tracker-ready PV plus storage on brownfield and industrial land — sovereign energy that turns otherwise-near-worthless midday solar into compute revenue and stored heat, flexing the national grid.
Federate
One scheduling plane unites Icarus core sites, Hearth residential nodes and Aquila edge inference — placing each workload where power, latency and confidentiality fit best.
Contain
Compute stays on Swiss soil under the FADP and ISG. Confidential-compute enclaves seal every workload from us and from the homeowner whose node runs it. Nothing leaves the perimeter; every job is logged.
An autonomous aerial mesh that watches without watching. Aquila is a fleet of self-charging AI drones that dock at Hearth nodes and run their inference on Icarus, giving continuous coverage of the zones a customer owns or is lawfully authorized over. Everything is encrypted at the sensor; a frame is only ever decrypted when a lawful Vanguard watchlist factor matches it — the match itself is the key. Aquila detects and classifies; it never jams and never strikes. The customer owns the airspace authorization and the sensors. Operated under FOCA SPECIFIC authorization; coming soon.
Patrol
Self-charging drones dock and recharge at Hearth nodes, handing off coverage across authorized residential, industrial, political and border zones — flown by the customer under FOCA SPECIFIC authorization, Remote-ID on, fully insured.
Seal
Every face, plate and object is encrypted on the drone before anything is transmitted. Raw imagery never lands in the clear. Passive detection and classification only — no jammers, no kinetic effectors. Swiss soil, FADP and ISG by design.
Match-to-decrypt
Only a hit against a lawful, warrant-scoped Vanguard watchlist yields the key to decrypt and log that single record. Match-driven access means proportionate, auditable surveillance — never mass facial recognition of the public.
The platform exists to be deployed against your data.
Five days, fixed scope, two security-cleared (PSP) forward-deployed engineers on site, a working application by Friday.