Hermes Platform Architecture

1. Observe What changed? →

2. Understand Why does it matter? →

3. Track How does risk evolve? →

4. Predict What happens next? →

5. Decide What to do? →

6. Verify What happened? →

7. Remember Persistent memory

🏛️ Platform Pillars

📡 Machine-Readable Data & Feeds Raw JSON APIs, OASIS STIX 2.1 bundles, and TAXII 2.1 discovery collections.

🕸️ Knowledge Graph Ontology Graph database connecting 556+ entities and 575+ relationships across threats.

⚖️ Epistemic Methodology Mathematical foundations for HTS, risk curves R(t), and confidence vectors.

🛡️ Trust & Security Center 100% client-side privacy model, reproducible builds, and data limitations.

1. Zero-Backend Sovereign Architecture

Unlike legacy cybersecurity SaaS platforms that centralize and store proprietary client inventories in remote clouds:

Client-Side Execution: The Hermes UI, SBOM analyzer, and risk comparator execute entirely within your browser runtime using WebAssembly and modern JavaScript.
Static Pre-Compilation: All threat intelligence feeds and graph indexes are pre-compiled during deterministic Linux build stages.
No Central Ingestion of Your Data: Your SBOMs, CVE matches, and configuration files never leave your workstation.

2. Ingestion & Intelligence Factory Pipeline

INGEST (NVD, CISA KEV, EPSS, arXiv, Git)
  ↓
NORMALIZE (Canonical Schema Validation)
  ↓
OBSERVE (Epistemic State & Confidence Vector OBS-*)
  ↓
GRAPH (Entity Ingestion & Relationship Matrix)
  ↓
TRAJECTORY (Derive R(t) & Discrete Velocity)
  ↓
FORECAST (Probabilistic Bounded Predictions)
  ↓
DECIDE (Prescriptive T0/T1 Directives)
  ↓
PUBLISH (Static JSON, STIX 2.1, TAXII 2.1, HTML)