Heritage Mainframes
Batch cycles measured in decades. Job queues older than the engineers running them. Security posture rebuilt without touching a single production JCL card.
COBOL · PL/I · JES2 · VSAM · CICSPrivate cybersecurity for antiquated government systems; the untouched, the unknown, the unpatched, and the unmaintained.
AIRGAP DIVISION · HERITAGE SYSTEMS UNIT · ■ WATCH STANDING
// the untouched estate
Governments run on systems installed before the internet had a name: mainframes that never sleep, registries no vendor still supports, programs written by people no one can find. CYBERTATCHI is the private practice that guards them. Not with rip-and-replace, but with watchfulness: map what everyone forgot, harden what cannot be patched, and keep the oldest machines on their feet without breaking a single promise they still keep.
Batch cycles measured in decades. Job queues older than the engineers running them. Security posture rebuilt without touching a single production JCL card.
COBOL · PL/I · JES2 · VSAM · CICSNetworks that have never seen a patch Tuesday. Isolation treated as the asset it is; custody, transit, and insider discipline as the perimeter.
SNEAKERNET · OPTICAL VAULT · FARADAY DISCIPLINEControllers that run water, power, and rail on protocols from another century. Assessment and hardening inside uptime constraints that never bend.
SCADA · MODBUS · DNP3 · RTU · NERC-ERA GEARLedgers, deeds, and vital records on systems untouched since the seventies. Integrity watches that prove nothing moved, not even a byte.
TAPE VAULTS · MICROFICHE INDEXES · FLAT-FILE CIVIL REGISTERSOne-off code written for one agency, once, by someone nobody remembers. Reverse-read, documented into existence, and fenced until rewritten.
UNKNOWN SOURCE · ORPHAN BINARIES · LOST BUILD CHAINSSatellite ground stations and tracking assets whose software predates their operators. Quiet hardening for machines that cannot be rebooted twice.
TT&C LEGACY · VHF/UHF ARCHIVES · EPHEMERIS VAULTS// doctrine
"The new infrastructure gets the audits. The old infrastructure gets the assumptions. We trade assumptions for eyes."
CYBERTATCHI practices sousveillance: with NEXUSAEYE as the eye, the watch looks back at everything that looks at these systems. What observes the estate is observed; what probes the estate is recorded. The record answers first.
A legacy system that keeps its promise is worth more than a modern one that breaks it. Nothing we do interrupts a production cycle.
Harden in place. Compensate what cannot be patched. Document what nobody wrote down. Replace nothing that still keeps faith.
No client rosters. No case studies with names. The work is referenced by outcome, and the outcomes speak.
// capabilities
Full-spectrum mapping of forgotten estates: interfaces, dependencies, listeners, and trust paths; delivered as a living atlas, updated on every sweep.
PASSIVE MAPPING · NO PRODUCTION TOUCHCompensating controls for systems that cannot be patched: segmentation, bastions, one-way gates, and ceremony-grade access discipline.
SEGMENTATION · BASTION ACCESS · DATA DIODESRed work against the estate under real legacy constraints; if an adversary with period tooling cannot move, a modern one will find the same wall.
LEGACY-CONSTRAINT RED TEAM · PERIOD-TOOL THREAT MODELSStanding watch over the untouched: integrity proofs on immutable intervals, anchored so no edit, erasure, or backdate survives unnoticed.
INTEGRITY ANCHORS · SIGNED LEDGER · TIME-CHAIN PROOFS