Solutions catalog · Deployment
Solutions that run in your environment
31 solutions whose product pages list a deployment option of this kind under “Where and how it runs”, for example “Runtimes in your environment”, “Your environment”, “Client-hosted across domains”. Each product page sets out what the option involves.
Not sure where to start? Answer four questions in the guided finder
API Security & Integration
Securing the connectivity between legacy mainframes (COBOL) and modern fintech apps.
6 requirements · 7 integrations · 3 ways to deploy
Battlefield Medical Record (Tactical EHR)
Combat medics operate in chaotic, high-stress environments. For exercises and administrative tracking, this lightweight medical record lets a care team type each casualty's injuries, interventions, medications and vital signs into a browser as time-stamped entries, and tracks evacuations and handoffs against your target times. There is no voice entry, offline mode or connection to a health record system; clinical decisions remain with medical personnel.
6 requirements · 7 integrations · 4 ways to deploy
Cross-Domain Solution (CDS) Transfer Agent
Moving files between classification levels (e.g., from Unclassified NIPRNet to Secret SIPRNet) carries the risk of malware transfer or data leakage. This workflow component runs the request, check, review and logging around each transfer: the inspection and sanitization results your own guard and sanitizers report are checked against the path's rules before trained reviewers decide. It doesn't move or sanitize files itself; human review and cross-domain approval remain yours.
6 requirements · 7 integrations · 3 ways to deploy
Cryptographic Key Management System (CKMS)
Secure communications rely on encryption keys. This system keeps the accounting record of cryptographic keys for tactical radios and weapon systems, from distribution to destruction, and shows every affected holder and device when a key is compromised. Revocation depends on people acting on the controlling authority's direction.
6 requirements · 7 integrations · 4 ways to deploy
Data Loss Prevention
Network and endpoint blocking of outbound transmission of SSNs or credit card numbers (PAN).
6 requirements · 7 integrations · 4 ways to deploy
Database Security
Real-time monitoring of SQL queries to detect mass data exfiltration events.
6 requirements · 6 integrations · 3 ways to deploy
Diplomatic Cable Archive & Search
The State Department relies on historical precedent for foreign policy. This highly secure archive keeps decades of diplomatic cables searchable by keyword, phrase and field. It helps diplomats quickly retrieve historical context for current crises, filtering results by each user's need-to-know groups and the documents' handling markings before anything is shown. Access is only as accurate as document markings and need-to-know data, and classification decisions remain with your authorized officials.
6 requirements · 7 integrations · 3 ways to deploy
Drone/UAV Flight Log & Maintenance Tracker
Unmanned systems require rigorous maintenance to remain airworthy. This fleet management tool tracks flight hours, battery cycles, and maintenance intervals for drone fleets, showing what is coming due before it is overdue to support readiness. Airworthiness, grounding and return-to-service decisions remain with qualified people in your organization.
6 requirements · 7 integrations · 4 ways to deploy
Foreign Disclosure/Release (FDR) Workflow
Sharing intelligence with coalition partners is critical but legally complex. This decision-support tool assists Foreign Disclosure Officers in determining what information can be shared with specific allies (e.g., "Five Eyes" vs. NATO). It checks release markings against the disclosure rules your office maintains and flags export-controlled (ITAR) material for review.
6 requirements · 7 integrations · 3 ways to deploy
Insider Threat "UBA" (User Behavior Analytics)
The greatest threat often comes from within. This case system gives your insider threat hub one place to triage concerns referred by people or by your own monitoring tools—such as a user downloading large files at 3 AM or printing excessive documents—and work them through legal and privacy review, identity reveal and referral, with oversight of every step. It monitors no one itself.
6 requirements · 7 integrations · 3 ways to deploy
Integration Engine
Managing the HL7/FHIR message flows between disparate clinical systems.
6 requirements · 8 integrations · 3 ways to deploy
Inter-Agency "Silo Breaker" Data Bridge
Sharing data between agencies (e.g., IRS and ICE, or HUD and VA) is often legally and technically fraught. This tool checks each query one agency puts to another against the agreement's rules before the agencies' own systems exchange the answer, so only agreed fields are released and data stays at the source. It logs every query for audit, so privacy officers can show sharing stayed within the agreement; legal authority, agreements and privacy impact assessments remain the agencies' responsibility.
6 requirements · 6 integrations · 4 ways to deploy
Mission Partner Environment (MPE) Builder
Coalition operations require ad-hoc networks. This tool automates the rapid spinning up of secure network enclaves where US forces can share data with allies for a specific mission duration, then tears them down, revoking access and sanitizing enclave storage. Disclosure decisions remain with your foreign disclosure officers.
6 requirements · 7 integrations · 3 ways to deploy
Munitions Accountability & Audit Ledger
Losing track of weapons is unacceptable. This ledger system tracks every serial number, from rifles to missiles, from receipt to expenditure or disposal, supporting accountability and helping detect theft, diversion, or loss. Accuracy depends on every movement being scanned and signed for.
6 requirements · 7 integrations · 4 ways to deploy
Network Access Control
Quarantining unknown medical devices that plug into hospital wall jacks.
6 requirements · 7 integrations · 4 ways to deploy
Nuclear Command & Control (NC3) Assurance Check
For the most critical systems, error is not an option. This assurance record tracks the integrity checks your staff perform on the software configurations of nuclear command and control systems, and their link health results, against the approved baseline, turning every difference into a discrepancy for investigation. It runs no checks itself, and no check can prove a system is uncompromised.
6 requirements · 7 integrations · 3 ways to deploy
Personnel Security (PerSec) Clearance Tracker
Managing security clearances is a continuous process. This system tracks the lifecycle of clearances (Secret/Top Secret), monitoring re-investigation dates and logging the continuous vetting alerts and self-reported events (e.g., arrests, financial issues) your security office receives, so each is reviewed and tracked to an outcome. Alerts are entered by staff or through the Work API; it connects to no government feed.
6 requirements · 7 integrations · 4 ways to deploy
Privileged Access Management
Vaulting and rotating passwords for core banking admin accounts.
6 requirements · 7 integrations · 3 ways to deploy
Public Cloud Infrastructure
Managing the tenant with "Policy as Code" guardrails designed to block public S3 buckets holding consumer data. Guardrails reduce, not remove, misconfiguration risk; data decisions remain yours.
6 requirements · 7 integrations · 4 ways to deploy
Satellite/Geospatial Data Lake
Intelligence agencies collect petabytes of satellite imagery. We architect and manage massive, high-throughput storage arrays optimized for this data, enabling rapid ingestion and AI processing to detect changes in terrain or force buildup.
6 requirements · 7 integrations · 3 ways to deploy
SCIF Access Control & Management System
Sensitive Compartmented Information Facilities (SCIFs) are the physical fortresses of the intelligence community. This facility management tool digitizes physical access logs, manages "Visitor Access Requests" (VARs), and records Intrusion Detection System (IDS) events your alarm system team sends through the Work API or staff enter, with the response to each. It replaces paper logs with an append-only digital audit trail that supports the facility management requirements of ICD 705; accreditation decisions remain with the accrediting official.
6 requirements · 6 integrations · 3 ways to deploy
Secure File Transfer
Encrypted "drop box" for clients to upload tax returns without using insecure email.
6 requirements · 7 integrations · 3 ways to deploy
Single Sign-On
"Tap-and-Go" badge access allowing clinicians to roam between workstations without re-typing passwords.
5 requirements · 7 integrations · 3 ways to deploy
Software Bill of Materials (SBOM) Watchtower
The defense supply chain is vulnerable to software supply chain attacks. This platform checks software entering the DoD environment at the point of intake, reading supplier and in-house SBOMs to find "nested dependencies" (like Log4j) and holding packages that break your vulnerability, supplier and provenance policies for a decision, helping protect the integrity of mission systems. It doesn't decompose binaries or generate SBOMs, and admission decisions remain with your designated approvers.
6 requirements · 8 integrations · 3 ways to deploy
Not sure which of these fit? Use the guided finder, browse by requirement or request a gap analysis.