01
Heritage Mainframes
Batch cycles measured in decades. Job queues older than the engineers running them. Security posture rebuilt without touching a single production JCL card.
COBOL · PL/I · JES2 · VSAM · CICSCYBER
TATCHI
Private cybersecurity for antiquated government systems; the untouched, the unknown, the unpatched, and the unmaintained.
AIRGAP DIVISION · HERITAGE SYSTEMS UNIT · ■ WATCH STANDING
// the untouched estate
Old Machines. Older Promises.
Governments run on systems installed before the internet had a name: mainframes that never sleep, registries no vendor still supports, programs written by people no one can find. CYBERTATCHI is the private practice that guards them. Not with rip-and-replace, but with watchfulness: map what everyone forgot, harden what cannot be patched, and keep the oldest machines on their feet without breaking a single promise they still keep.
02
Air-Gapped Archives
Networks that have never seen a patch Tuesday. Isolation treated as the asset it is; custody, transit, and insider discipline as the perimeter.
SNEAKERNET · OPTICAL VAULT · FARADAY DISCIPLINE03
Industrial & OT
Controllers that run water, power, and rail on protocols from another century. Assessment and hardening inside uptime constraints that never bend.
SCADA · MODBUS · DNP3 · RTU · NERC-ERA GEAR04
Records & Registries
Ledgers, deeds, and vital records on systems untouched since the seventies. Integrity watches that prove nothing moved, not even a byte.
TAPE VAULTS · MICROFICHE INDEXES · FLAT-FILE CIVIL REGISTERS05
Bespoke Programs
One-off code written for one agency, once, by someone nobody remembers. Reverse-read, documented into existence, and fenced until rewritten.
UNKNOWN SOURCE · ORPHAN BINARIES · LOST BUILD CHAINS06
Ground & Space Legacy
Satellite ground stations and tracking assets whose software predates their operators. Quiet hardening for machines that cannot be rebooted twice.
TT&C LEGACY · VHF/UHF ARCHIVES · EPHEMERIS VAULTS
> sweep --scope=heritage --depth=full
06 sectors mapped · 0 interruptions to production cycles · 14 undocumented interfaces flagged
3 orphaned binaries documented · 1 unknown listener contained · 0 exfiltrations on record
> posture: UNBROKEN · continuity: GUARANTEED · watch: STANDING
06 sectors mapped · 0 interruptions to production cycles · 14 undocumented interfaces flagged
3 orphaned binaries documented · 1 unknown listener contained · 0 exfiltrations on record
> posture: UNBROKEN · continuity: GUARANTEED · watch: STANDING
// doctrine
The Oldest Systems Are The Least Watched
"The new infrastructure gets the audits. The old infrastructure gets the assumptions. We trade assumptions for eyes."
CYBERTATCHI practices sousveillance: with NEXUSAEYE as the eye, the watch looks back at everything that looks at these systems. What observes the estate is observed; what probes the estate is recorded. The record answers first.
Continuity First
A legacy system that keeps its promise is worth more than a modern one that breaks it. Nothing we do interrupts a production cycle.
No Rip & Replace
Harden in place. Compensate what cannot be patched. Document what nobody wrote down. Replace nothing that still keeps faith.
Discretion
No client rosters. No case studies with names. The work is referenced by outcome, and the outcomes speak.
// capabilities
The Practice
A
Silent Cartography
Full-spectrum mapping of forgotten estates: interfaces, dependencies, listeners, and trust paths; delivered as a living atlas, updated on every sweep.
PASSIVE MAPPING · NO PRODUCTION TOUCHB
Hardening In Place
Compensating controls for systems that cannot be patched: segmentation, bastions, one-way gates, and ceremony-grade access discipline.
SEGMENTATION · BASTION ACCESS · DATA DIODESC
Adversarial Emulation
Red work against the estate under real legacy constraints; if an adversary with period tooling cannot move, a modern one will find the same wall.
LEGACY-CONSTRAINT RED TEAM · PERIOD-TOOL THREAT MODELSD
Watchkeeping
Standing watch over the untouched: integrity proofs on immutable intervals, anchored so no edit, erasure, or backdate survives unnoticed.
INTEGRITY ANCHORS · SIGNED LEDGER · TIME-CHAIN PROOFS// client access
Client Watch
Ω
The Standing Watch, On Your Machine
CYBERTATCHI Watchkeeping, issued as a program: Client Watch runs on the client's own machine and proves, on immutable intervals, that nothing on it moved, was read, or was rewritten without leave. Built for small businesses and startups, mom and pop shops, digital nomads, and high value or highly targeted individuals; the people with the most to lose and the least coverage.
Retainer clients download the Client Watch program at cybertatchi-dl.pages.dev with the access code issued at signup. The gate logs every attempt; the code is yours alone, and it rotates on schedule.
CODE-GATED DELIVERY · SIGNED PACKAGE · ACCESS LOGGED