Government and defence engagement

PNTMAP™ is operated by Decent Cybersecurity Ltd, a company registered in England and Wales (company number 15364616, ICO data protection registration ZC223375), London. Group credentials belong to the entities that hold them and are not transferred to the platform: Decent Cybersecurity s.r.o., a Decent Cybersecurity group company, was selected for NATO DIANA's 2026 Decision Superiority for NATO Warfighters Challenge. That selection belongs to s.r.o.; it is not a NATO endorsement of PNTMAP™ and is not held by Decent Cybersecurity Ltd. Personnel security clearances are held by named individuals, not by the platform. Full detail is on the sovereign page.

Nodes are UK-sited and owned by the operator. Telemetry is authenticated per node with server-side validated keys and stored in UK-hosted managed infrastructure. Transport uses TLS 1.3 with hybrid post-quantum key agreement (X25519MLKEM768, ML-KEM / FIPS 203) negotiated by default at the edge and on the backend link, for supporting clients (Chrome/Edge 124+, Firefox 132+, recent OpenSSL). Older clients fall back gracefully to classical X25519, and certificate authentication remains classical (ECDSA/RSA). There is no dependency on third-party or community-sourced aggregated ADS-B feeds for the evidence record.

Three routes are supported architecturally: participation in the public national network; dedicated nodes at customer-nominated sites reporting into a customer-scoped view; and a wholly separate instance under customer control. Dedicated and sovereign deployments are scoped per customer and are not priced publicly.

Government and public-sector organisations may participate in the PNTMAP™ Founding Design Partner Programme where the objective is to evaluate operational requirements, intelligence workflows, evidence requirements or integration needs. The programme is £78,000 + VAT per organisation for the 12-month engagement and is limited to 10 founding organisations.

PNTMAP™ can also scope customer-specific architectures including dedicated monitoring infrastructure, customer-scoped intelligence environments and, where required, separate deployments under customer control. These are scoped individually and separately from the Founding Design Partner Programme.

The public platform processes only publicly broadcast ADS-B telemetry and operator-owned sensor measurements, and is operated at OFFICIAL. It does not currently hold, process or store classified material, and holds no classified-handling accreditation. Nothing on the public platform, including anything described on the sovereign page, should be read as accredited for classified handling. Classified deliverables are a separate, individually scoped engagement outside the public platform, agreed case by case.

Records are designed as an append-only, tamper-evident evidence log, with post-quantum (ML-DSA-65) node signing live and verified at ingest on all UK nodes. Independent evidence anchoring is live: each ledger block header is timestamped by the Bitcoin blockchain (OpenTimestamps) and by an RFC 3161 timestamp authority (DigiCert), with recent blocks anchored on the next scheduled run. The trust model, record format and current status are published on Verify Evidence.

Bespoke reporting periods, region-scoped analysis, retrospective incident reconstruction within the retained record, and additional RF sensing payloads at nominated sites can be scoped. RF L1/L5 monitoring is planned network-wide and is not live on any node today.

Use the contact route and state the requirement.