Every page on this site, documented in one place.
This is the complete map of site.cyberdragon.axixtechnologies.com and every top-level section and the pages under it, plus operator, architect, and partner documentation that ships with a tenant.
Documentation covers Core microservices, Edge install, Purdue / IEC 62443 zoning, OPA guardrails, evidence export, and the partner API (openapi/partner-api.yaml). Full docs ship with customer tenants; the site map below is every page in this public site.
Six manuals, from wiring a TAP to signing a detection pack.
The seven stages every event passes through.
Capture
Edge mirrors traffic from a SPAN port or hardware TAP at the industrial DMZ and parses OT protocols locally.
Buffer
Events land in a SQLite WAL store-and-forward queue (~5,000 events) so a link outage never loses telemetry.
Transport
HMAC-SHA256 signed batches, optionally mTLS, are shipped to Core over the ingest network only.
Enrich
Threat-intel fusion adds OTX, Abuse.ch, ThreatFox, MITRE TAXII, and GreyNoise context in flight.
Correlate
Cascading W15 / W60 / W24 windows assemble events into kill chains and flag Enterprise→OT pivots explicitly.
Decide
Risk scoring, compliance auto-mapping, and Temporal playbooks with human approval and OPA guardrails.
Seal
Detections, approvals, and denials are hash-chained and Ed25519-signed into the evidence vault.
Everything the console does is available over the API.
| Asset | Detail |
|---|---|
| Public API | REST / GraphQL at /v1/ |
| Auth API | /auth/ and PQC hybrid JWT |
| Edge Ingest | POST /edge/ingest and HMAC authenticated |
| OpenAPI spec | openapi/partner-api.yaml |
| Python SDK | cyberdragon-partner-sdk |
| TypeScript SDK | cyberdragon-partner-sdk |
| SCIM 2.0 | User / group provisioning |
| Export formats | STIX, CEF, syslog, TAXII2 |
Frequently asked questions.
Start your 7-day free trial.
A dedicated CyberDragon tenant on your own traffic and not a slide deck. See kill-chain cyber defense on your network.