Your SIEM, endpoint and identity tools each see one slice. Spark sits above them: it reads what they report, adds its own exposure view across every connected entity, reasons over all of it with AI that never leaves Qatar, and gives each finding an accountable owner and a deadline. Every tool read-only by default, every finding evidence-backed, every signal recorded in a tamper-evident audit log. Deployed on-premises in Qatar or in a sovereign cloud inside Qatar.
Discover. Harden. Hunt. Prove. Spark Platform ties recon, offensive testing, defensive hardening and continuous monitoring into one evidence-chain that executives, auditors and operators can all read.
Every tool in the suite plugs into the same four-phase loop. That's why findings in the AI Fuzzer show up in the executive dashboard without re-import, and why a cloud misconfiguration automatically produces an elimination step.
The National Cyber Command fuses every entity's posture into one picture; the seven tools do the work beneath it. Each link below is the live product, not a slide.
Every government entity's posture in one live national picture - threat level with its rationale, a national fusion map, sector heat, binding directives with measured compliance, incidents coordinated through the five NIMF stages, a signed event stream and an Ed25519-signed situation report. The capstone that makes this the national platform.
Active Cyber Defence and the National Threat Exchange in one module - the programmes the world's leading agencies run: protective DNS, email-authentication enforcement, a national exploited-vulnerability catalogue correlated live, STIX 2.1 threat exchange and early warning.
Launch tool →Model-agnostic adversarial fuzzer: seven attack families multiplied through 16 transformations into 1,000+ bilingual attack inputs. Every finding reproduced, minimised, scored and signed.
Launch tool →35+ AWS services analysed in minutes. Read-only, agentless. Weighted risk scoring, mapped to NIA. Pre-flight script included - paste the output, get a signed board-ready report.
Launch tool →Not another "detect and respond" dashboard. See a named adversary, deny their TTPs, evict any current presence, instrument re-entry. Four phases, by actor.
Launch tool →Point it at a domain. The AI finds the weak points - crypto misconfig, auth weakness, injection vectors, business-logic abuse - then explains, prioritises and re-assesses on a schedule.
Launch tool →What's coming in. What's going out. What's weak right now. Live traffic topology, lateral-movement heat, exfil alerts - on one screen.
Launch tool →Full OWASP Top 10 (2025) coverage - broken access control, injection, auth failures, cryptographic failures, security misconfig. Maps to ISO 27001, SOC 2, NIS2.
Launch tool →Spark's own in-house AI model - built, trained and run by Spark, not a third-party AI. It ranks what to fix, briefs the minister, explains any finding, CVE or control, evaluates a domain against the resolver policy, answers open security questions and speaks EN, AR or DE. Runs entirely on this host; nothing leaves it.
Open assistant →We mapped the programmes of CISA (United States), the NCSC (United Kingdom), the BSI (Germany) and the ASD (Australia) - the agencies most often cited as the reference national programmes - and built the whole stack into Spark Platform, on-prem, signed, in your language.
| Agency programme | Who runs it | Spark Platform | Status |
|---|---|---|---|
| Known Exploited Vulnerabilities catalogue · BOD 26-04 (formerly 22-01) | CISA · US | SHIELD - national catalogue with remediation windows, correlated live against what you run | Live |
| Email-authentication mandate (DMARC, SPF, HSTS) · BOD 18-01 | CISA · US | SHIELD - live SPF/DMARC/DKIM/MTA-STS/DNSSEC/CAA/HSTS checks + directive ND-2026-01 | Live |
| Active Cyber Defence - Protective DNS, Takedown, Early Warning | NCSC · UK | SHIELD - resolver policy engine, takedown queue, owner-addressed early warnings | Live |
| Automated Indicator Sharing, AIS (STIX/TAXII) · CISA Cyber Threat Information Sharing / ASD Cyber Threat Intelligence Sharing (CTIS) | CISA · US / ASD · AU | SHIELD - National Threat Exchange, STIX 2.1 in/out, TLP, cross-tool sightings | Live |
| Cyber Hygiene external vulnerability & web scanning | CISA · US | Domain AI Scanner + OWASP & Compliance | Live |
| Cloud configuration baselines (cf. ScubaGear) | CISA · US | Cloud Health Check - 35+ AWS services, read-only, NIA-mapped | Live |
| Network traffic analysis & logging baselines (Malcolm, LME, HBC) | CISA · US / NCSC · UK | Infrastructure Monitor | Live |
| ATT&CK mapping & threat hunting (Decider, CAF 4.0) | CISA · US / NCSC · UK | Adversary Elimination Playbook | Live |
| National situation reporting, directives & regulated-entity portal | BSI · DE / CISA · US | National Cyber Command - fusion map, directives, NIMF incident command, signed situation report | Live |
| Baseline frameworks (Essential Eight, Cyber Essentials, IT-Grundschutz) | ASD · AU / NCSC · UK / BSI · DE | Every finding mapped to Qatar NIA v2.1 / NISCF, ISO 27001, SOC 2, NIS2 | Live |
| AI / LLM security testing | No agency runs it as a standing programme; vendors sell it as cloud services or consulting | AI Fuzzer - 1,000+ generated attack variants, OWASP-LLM + MITRE ATLAS evidence, offline inside the agency | Agency gap |
| In-house AI assistant over the national picture - nothing leaves the host | No agency publishes this as a tool; vendor copilots run on third-party cloud models | Spark SRE-1 - Spark's in-house AI model on the host, EN / AR / DE | Agency gap |
Programme names and scope from the agencies' official pages, October 2026. Every "Live" row is a running application in this platform - open it from the grid above.
A SIEM sees logs. Endpoint tools see devices. Identity tools see sign-ins. None of them sees the nation. Spark is the layer above: it connects to each entity read-only, builds one exposure picture across ministries and operators, runs sovereign AI (SRE-1) on it inside your boundary, and turns every finding into an advisory with an owner, a deadline and signed closure evidence.