CyberDragon Core is live — indigenous SIEM/SOAR with Edge protocol capture. Start a 7-day free trial on your own traffic →
Documentation

Every page on this site, documented in one place.

This is the complete map of site.cyberdragon.axixtechnologies.com — every top-level section and the pages under it, plus operator, architect, and partner documentation that ships with a tenant.

Documentation covers Core microservices, Edge install, Purdue / IEC 62443 zoning, OPA guardrails, evidence export, and the partner API (openapi/partner-api.yaml). Full docs ship with customer tenants; the site map below is every page in this public site.

What the deep docs cover

Six manuals, from wiring a TAP to signing a detection pack.

Explore Now
Explore Now
Explore Now
Explore Now
Explore Now
Explore Now
Pipeline reference

The seven stages every event passes through.

01

Capture

Edge mirrors traffic from a SPAN port or hardware TAP at the industrial DMZ and parses OT protocols locally.

02

Buffer

Events land in a SQLite WAL store-and-forward queue (~5,000 events) so a link outage never loses telemetry.

03

Transport

HMAC-SHA256 signed batches, optionally mTLS, are shipped to Core over the ingest network only.

04

Enrich

Threat-intel fusion adds OTX, Abuse.ch, ThreatFox, MITRE TAXII, and GreyNoise context in flight.

05

Correlate

Cascading W15 / W60 / W24 windows assemble events into kill chains and flag Enterprise→OT pivots explicitly.

06

Decide

Risk scoring, compliance auto-mapping, and Temporal playbooks with human approval and OPA guardrails.

07

Seal

Detections, approvals, and denials are hash-chained and Ed25519-signed into the evidence vault.

Programmatic surface

Everything the console does is available over the API.

AssetDetail
Public APIREST / GraphQL at /v1/
Auth API/auth/ — PQC hybrid JWT
Edge IngestPOST /edge/ingest — HMAC authenticated
OpenAPI specopenapi/partner-api.yaml
Python SDKcyberdragon-partner-sdk
TypeScript SDKcyberdragon-partner-sdk
SCIM 2.0User / group provisioning
Export formatsSTIX, CEF, syslog, TAXII2
FAQ

Frequently asked questions.

Where is the API specification?
The partner OpenAPI spec ships with the platform, and the integrations page summarizes REST/GraphQL endpoints, SDKs, SCIM, and export formats.
Is documentation available before purchase?
Trial tenants include operator documentation. Architecture and deployment guides are shared during Proof of Value scoping.
Is this page the full site map?
Yes — every top-level navigation section and its pages are listed above, in the same order they appear in the site header.

Start your 7-day free trial.

A dedicated CyberDragon tenant on your own traffic — not a slide deck. See kill-chain cyber defense on your network.