Operating Principles
Sovereign Field Neural Intelligence
The Brain, Not the Goggles
HARBINGER does not sell sensors, cameras, or transponders. It processes what your existing sensors already collect, and produces intelligence your operators can act on. The sovereign intelligence layer sits above the hardware, not inside it.
Adversarial Research on Real Hardware
Matrix CR Studio runs its own PQC attack circuits on IBM Quantum hardware. HARBINGER's PQC posture is built from our own null-test results, not from vendor briefings.
LATAM Sovereign Posture
Operating from Costa Rica, Matrix CR is non-US aligned, a material advantage for LATAM port operators and organizations that cannot politically engage US-headquartered security firms. We are fluent in the regional threat landscape.
Capabilities
What HARBINGER Does
01
Maritime Domain Awareness
AIS anomaly scoring with protected-zone incursion detection. Validated on real public AIS. Dark fleet detection via behavioral vessel signatures: speed manipulation, position gaps, sanctioned-zone proximity, flag-of-convenience mismatches. Alerts on vessels that intelligence says are clean but physics says are not.
02
Port Infrastructure Security
OT/SCADA assessment of port crane systems, terminal automation, and ship-to-shore communications. Full coverage of USCG MARSEC Directives 105-4 and 105-5, the US cyber-risk actions for PRC-manufactured ship-to-shore cranes: systems that hold roughly 70% of the global market and have been flagged by US authorities for undocumented remote-access capabilities.
03
PQC-Hardened Communications
Maritime satellite links (Inmarsat VSAT, Iridium) still rely on RSA/ECDH key exchange that NIST has scheduled for deprecation by 2030, and AIS broadcasts carry no encryption at all. HARBINGER assesses SATCOM exposure, designs ML-KEM-768 encrypted channels, and delivers alignment with expected IMO 2027 cyber resilience requirements.
04
Sovereign Operation
HARBINGER runs on hardware you own. No cloud dependency. No external kill switch. No vendor lock-in to a jurisdiction that may not align with your operational posture. Intelligence derived from your sensors stays in your infrastructure.
Who It's For
Three Buyer Profiles
Maritime Operators & P&I Clubs
- -Dark fleet exposure: sanctions screening per vessel
- -OFAC / EU liability before a vessel enters your fleet
- -Real-time chokepoint threat assessment for routing decisions
- -Cryptographic evidence trail for insurance disputes
Port Authorities & Terminal Operators
- -ZPMC crane firmware IOC scan (USCG MARSEC 105-4/105-5)
- -Industrial protocol exposure (Modbus · S7comm · DNP3 · EtherNet/IP)
- -SCADA segmentation audit against maritime OT standards
- -Bilingual (EN/ES) attestation deliverables aligned to maritime OT standards
Defense & Sovereign Intelligence Organizations
- -Sovereign Field Neural Intelligence (SFNI) deployment, no cloud jurisdiction
- -PQC-hardened sensor-to-analyst data protection (ML-KEM-768; transport encapsulation in active development)
- -Custom intelligence architecture on dedicated hardware
- -Briefing and engagement under NDA, no published scope
The Quantum Threat
Every ship's communications
are already being harvested.
Harvest Now, Decrypt Later. Adversaries are capturing today's encrypted maritime communications (SATCOM, Iridium, VSAT) to decrypt once a cryptographically-relevant quantum computer is available. NIST has set the timeline: RSA and ECDH are scheduled for deprecation by 2030 and disallowance by 2035. We have found no maritime SATCOM provider that has deployed ML-KEM.
HARBINGER is built with ML-KEM-768 (FIPS 203) from inception: implemented and running today for payload and at-rest protection, with transport encapsulation in active development.
2024
NIST finalizes ML-KEM, ML-DSA, SLH-DSA; RSA/ECDH transition timeline set (NIST IR 8547)
2027
CNSA 2.0: new US national security deployments must be PQC-compliant. No maritime exemption.
2027
Expected IMO cyber resilience update; PQC requirements anticipated
2030
NIST deprecates RSA-2048 and ECDH; harvested ship communications await decryption
Engage
Briefings are by request only.
HARBINGER is not a self-serve product. We engage directly with maritime operators, port authorities, and defense organizations. NDA-first available. Classified or restricted discussions accommodated.
Legal Notice
This page contains forward-looking statements. Detection metrics and operational figures reflect internal results under specific deployment conditions; actual performance will vary. References to USCG maritime security directives or CISA publications are for informational purposes only. Matrix CR Studio is not affiliated with, endorsed by, or acting as an agent of the U.S. Coast Guard, the U.S. Cybersecurity and Infrastructure Security Agency, or any other government body. Use of this technology may be subject to U.S. Export Administration Regulations (EAR) and applicable international export control laws. Services are not available in sanctioned jurisdictions.