Skip to content
Nexus Observatory

/

Civil resilience

/

Systems and technologies
The systems behind civil resilience.

The technologies that carry this industry’s observations, ranked against what it needs to observe and drawn from across the spectrum.

Plan a deploymentUse casesOpen the explainer

Reference design, drawn to scale · drag to turn

  1. Civil resilience · Systems and technologies

    Infrastructure that reports before it fails

    Condition and ground-movement monitoring for the networks a country runs on, operational-technology assurance for the sites that observe them, deployable kits for restoration, and northern and remote observing for civil authorities. Needs: asset condition and ground movement, security of the observing sites themselves, timing integrity, communications for restoration and remote and northern coverage.

  2. Platform · Sensors & instruments

    Measurements that carry their own proof

    Weather and environment stations to WMO practice, RF spectrum sensing in the band, and calibration that is traceable, recorded and repeated. Every value leaves with its metadata, quality flag and provenance. Or buy the observations and leave the hardware to us: Sensing as a Service.

    Sensors & instruments
  3. Platform · Earth observation & GeoAI

    The ground, measured and modelled

    Ground-segment downlink and processing at the edge, drone and imagery campaigns planned to the ground sample distance, site twins measured in 3D, and GeoAI trained and checked against field truth, with the source and licence of every layer in view.

    Earth observation & GeoAI
  4. Platform · Data & licensing

    Grid data, licensed for your use

    Research, commercial API, enterprise and government tiers, the licence of every source carried through to every product, routes from licensed to open release, and residency fixed by contract. It is delivered and supported by Nexus Observatory Inc. The evidence travels with the data wherever it goes.

    Data & licensing
  5. Platform · Edge compute & AI

    Inference beside the instrument

    A modular edge data centre at the foot of the tower, multi-access edge computing one hop from the radio, inference on the live stream, scientific models run where the data lands, and physical AI for drones and robots, inside published red lines.

    Edge compute & AI
  6. Platform · Protocol & Grid

    Your grid, on the open protocol

    Private and federated observing grids for networks, agencies and OEMs: providers admitted for a stated scope, devices qualified against the specification, software moved by signed plan and data exchanged across trust domains. Every step leaves evidence. Every reading and every change leaves a record that can be checked later.

    Protocol & Grid
  7. Platform · Software

    One runtime. Every node. Every state

    An edge runtime and node agent that enrol, attest and update each node; fleet operations that show every node with its state, its plan and its evidence; field apps for survey and commissioning; and the NXS Observatory app, where a team models the site before a bolt is turned.

    Software
  8. Platform · Security and trust

    Every node proves what it is

    Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. Every reading and every change leaves a record that can be checked later.

  9. How it scales

    One base unit, repeated

    A programme starts with one base node and the instruments it reads. A station adds power and radio, a site adds a relay, a fleet repeats the proven site across many places, and a network federates fleets through edge and core. Capacity grows by adding units, never by replacing what works.

  10. Updates

    Updates in rings, with rollback

    Software and configuration reach the fleet in rings: a canary site first, then a few, then all, each ring gated on health and data completeness. A failed gate stops the wave and returns each node to its last good release, without a site visit.

  11. Field service

    One crew, from survey to repair

    The same crew surveys, installs, commissions, calibrates and repairs, working from the site’s own record. Each visit updates it, so the next crew knows exactly what is there, when it was last checked and why it was changed. Spares and references are planned from that history.

  12. What you get

    Structural and ground-movement monitoring

    GNSS, InSAR, tilt, strain and fibre sensing on bridges, dams, slopes, tailings and pipelines, with alert thresholds set by the owner. Delivered as managed service and data licence, for infrastructure, mining and pipeline operators, transport agencies. Scale: Asset portfolios. Service levels are written as numbers you can measure on your own dashboard.

    Talk to sales
  13. Next step

    Plan a civil resilience deployment

    Tell us the sites, the measurements and the people who will use them. We reply with a design and a scope for civil resilience. An engineer replies with a survey proposal and a scope, and the plan grows from one site to the network you need, at your pace.

    Plan a deploymentOpen the StudioRead the stories

01Spectrum, timing and PNT

Interference, jamming and spoofing detection.

Spectrum, timing and PNT · Interference, jamming and spoofing detection

GNSS interference monitoring

Fixed sensors that detect and characterise GNSS interference near critical sites; detection and reporting only.

ICAO Doc 9849 (GNSS Manual) · ITU RR Art. 15

Spectrum, timing and PNT · Interference, jamming and spoofing detection

Spoofing detection

Signal-level checks, authentication and cross-checks with other sources that flag counterfeit GNSS signals.

Galileo OSNMA SIS ICD · DHS Resilient PNT Conformance Framework

Spectrum, timing and PNT · Interference, jamming and spoofing detection

Jammer location to support enforcement

Locating jamming sources and passing evidence to the regulator, which holds enforcement authority.

Radiocommunication Act (Canada) · ITU RR Appendix 10

Spectrum, timing and PNT · Interference, jamming and spoofing detection

Timing anomaly detection

Watching time error and source agreement so a bad reference is rejected before it spreads.

ITU-T G.8273.2 · IETF RFC 7384

Spectrum, timing and PNT · Interference, jamming and spoofing detection

Interference-resistant antennas

Multi-element and null-steering antennas that reduce the effect of interference on receivers.

DHS Resilient PNT Conformance Framework

Spectrum, timing and PNT · Interference, jamming and spoofing detection

Aviation and maritime GNSS disruption awareness

Sharing detected disruption with aviation and marine users through the proper authorities.

ICAO Doc 9849 (GNSS Manual)

All 7 in this layer

02Spectrum, timing and PNT

Packet timing: PTP, SyncE and NTP.

Frontier · Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Sub-nanosecond timing (high-accuracy profile)

Enhanced PTP techniques for sub-nanosecond alignment in science and metrology networks.

IEEE 1588-2019 (high accuracy default PTP profile)

Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Precision Time Protocol

The base protocol for distributing time and phase over packet networks.

IEEE 1588-2019

Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Telecom profile with full timing support

Every node a boundary or transparent clock, for the phase accuracy TDD and Open RAN need.

ITU-T G.8275.1 · ITU-T G.8273.2 (T-BC and T-TSC classes) · ITU-T G.8273.3 (T-TC)

Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Telecom profile with partial timing support

Timing over networks that do not support PTP in every node, often with local GNSS assist.

ITU-T G.8275.2 · ITU-T G.8273.4 (partial timing support clocks)

Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Frequency synchronisation profile

PTP used to deliver frequency only, for FDD and legacy equipment.

ITU-T G.8265.1

Spectrum, timing and PNT · Packet timing: PTP, SyncE and NTP

Synchronous Ethernet and enhanced SyncE

Physical-layer frequency distribution that stabilises PTP and supports holdover.

ITU-T G.8261 · ITU-T G.8262 and G.8262.1 (EEC and eEEC) · ITU-T G.8264 (ESMC)

All 10 in this layer

03Security, identity and trust

Monitoring, incident response and governance.

Security, identity and trust · Monitoring, incident response and governance

Incident response

Preparing, detecting, containing, recovering and learning, tied to risk management.

NIST SP 800-61 Rev. 3 · ISO/IEC 27035-1:2023

Security, identity and trust · Monitoring, incident response and governance

Security monitoring and logging

Central collection and correlation of device, network and application events.

NIST SP 800-92 (log management)

Security, identity and trust · Monitoring, incident response and governance

Coordinated vulnerability disclosure

Receiving, triaging and fixing reported vulnerabilities, with a published contact.

ISO/IEC 29147 · ISO/IEC 30111 · IETF RFC 9116 (security.txt)

Security, identity and trust · Monitoring, incident response and governance

CSIRT services

The services a security response team provides to its constituency.

FIRST CSIRT Services Framework

Security, identity and trust · Monitoring, incident response and governance

Digital evidence handling

Identification, collection and preservation of evidence after an incident.

ISO/IEC 27037

Security, identity and trust · Monitoring, incident response and governance

Information security management

The management system that sets policy, risk treatment and audit.

ISO/IEC 27001:2022 · NIST Cybersecurity Framework 2.0

All 8 in this layer

04Security, identity and trust

Zero trust and network security.

Security, identity and trust · Zero trust and network security

Zero trust architecture

No implicit trust from network location; each request authenticated, authorised and logged.

NIST SP 800-207 · CISA Zero Trust Maturity Model 2.0

Security, identity and trust · Zero trust and network security

Workload identity

Short-lived, attested identities for services and agents rather than static secrets.

SPIFFE specification

Security, identity and trust · Zero trust and network security

Port-based access and link encryption

Authenticating devices on wired ports and encrypting Ethernet links.

IEEE 802.1X-2020 · IEEE 802.1AE (MACsec)

Security, identity and trust · Zero trust and network security

Transport security

Modern encrypted transport for APIs, telemetry and constrained links.

IETF RFC 8446 (TLS 1.3) · IETF RFC 9147 (DTLS 1.3)

Security, identity and trust · Zero trust and network security

IPsec and site tunnels

Encrypted tunnels between sites, gateways and the NOC.

IETF RFC 4301 (IPsec) · IETF RFC 7296 (IKEv2)

Security, identity and trust · Zero trust and network security

Zones, conduits and segmentation

Grouping assets by risk and controlling every flow between groups.

IEC 62443-3-2 (risk assessment, zones and conduits)

All 7 in this layer

05Ground segment

Ground-station-as-a-service and antenna networks.

Ground segment · Ground-station-as-a-service and antenna networks

Shared antenna networks

Pay-per-pass access to antennas across many sites so missions do not have to build their own.

CCSDS 910.4-B (cross support reference model) · CCSDS 911.1-B (SLE return all frames)

Ground segment · Ground-station-as-a-service and antenna networks

Space link extension services

Standard services that deliver frames and accept commands between a ground station and a remote mission centre.

CCSDS 911.1-B (RAF) · CCSDS 911.2-B (RCF) · CCSDS 912.1-B (forward CLTU)

Ground segment · Ground-station-as-a-service and antenna networks

Pass scheduling and resource management

Booking, deconfliction and configuration of antennas and modems for each contact.

CCSDS cross support service management

Ground segment · Ground-station-as-a-service and antenna networks

High-latitude and polar ground sites

Northern sites that see polar-orbiting satellites on most orbits and cut data latency.

ITU RR Appendix 7 · Rec. ITU-R P.618

Ground segment · Ground-station-as-a-service and antenna networks

Ground segment cybersecurity

Access control, segmentation, monitoring and recovery for command and control systems.

NIST IR 8401 (satellite ground segment and the Cybersecurity Framework) · ISO/IEC 27001

Ground segment · Ground-station-as-a-service and antenna networks

Federated and hybrid ground networks

Combining owned, partner and agency antennas behind one scheduling and data interface.

CCSDS 910.4-B (cross support reference model)

All 7 in this layer

06Spectrum, timing and PNT

Spectrum monitoring and interference management.

Frontier · Spectrum, timing and PNT · Spectrum monitoring and interference management

Distributed low-cost SDR sensor networks

Many inexpensive receivers at sites forming a continuous spectrum picture.

Rec. ITU-R SM.1880 · ITU Handbook on Spectrum Monitoring

Frontier · Spectrum, timing and PNT · Spectrum monitoring and interference management

Machine-learning signal classification

Models that recognise signal types and anomalies in monitoring data.

ITU Handbook on Spectrum Monitoring

Spectrum, timing and PNT · Spectrum monitoring and interference management

Fixed, transportable and mobile monitoring stations

Calibrated receivers and antennas that measure what is actually on air around a site or region.

ITU Handbook on Spectrum Monitoring · Rec. ITU-R SM.1880 (spectrum occupancy measurement)

Spectrum, timing and PNT · Spectrum monitoring and interference management

Spectrum occupancy measurement

Statistics of channel use over time that inform planning, sharing and licence applications.

Rec. ITU-R SM.1880

Spectrum, timing and PNT · Spectrum monitoring and interference management

Emitter location (TDOA and angle of arrival)

Multi-sensor techniques that locate interference sources for resolution with the regulator.

ITU Handbook on Spectrum Monitoring

Spectrum, timing and PNT · Spectrum monitoring and interference management

Interference investigation and reporting

A documented process from detection to resolution, using international reporting formats where needed.

ITU RR Art. 15 · ITU RR Appendix 10 (harmful interference report)

All 8 in this layer

07Every domain

The rest of the spectrum.

The domains whose layers serve this industry, each with its full directory.

Layers · 8 · items · 61

In situ sensors and instruments

Instruments placed in the air, water, ground and spectrum, from weather stations to seismometers, radars and cameras, with the calibration, metadata and quality control that make their readings evidence.
Layers · 8 · items · 67

Remote sensing and Earth observation

Every platform, sensor, processing level and ground-segment step that turns remote measurements of the Earth into calibrated, analysis-ready evidence for a site, a region or a network.
Layers · 8 · items · 65

GIS, maps and GeoAI

The reference frames, formats, services, analysis methods, machine learning and 3D models that turn observations into located, queryable and decision-ready geographic information.
Layers · 8 · items · 59

Data, software and interoperability

How observations move from the edge into stores, catalogues and APIs with their provenance, licence and residency attached, and how they interoperate through open standards and the open Observatory Protocol.
Layers · 8 · items · 65

Compute and edge

Compute placed where data is produced and decisions are needed: the device, far, near and regional edge tiers, multi-access edge computing, modular edge data centres including the AI tower in a box, servers and accelerators, storage, power and cooling, ruggedisation, fleet orchestration, OTA and GitOps, and the hardware trust that makes remote sites safe to run.
Layers · 8 · items · 65

AI systems

AI from model to accountable operation: edge inference and model optimisation, foundation models for Earth observation and geospatial work, time-series and sensor AI, multimodal fusion and supervised agentic operations, federated and privacy-preserving learning, physical AI and robotics within stated red lines, MLOps, evaluation and model risk, and the governance frameworks that apply to each.
Layers · 8 · items · 61

Security, identity and trust

How every node proves what it is and what it runs, how links and keys are protected, how software is traced to its source, how personal data is minimised, and how incidents are found and handled.
Layers · 8 · items · 66

Field operations and lifecycle

Everything that happens on the ground across a site’s life: survey, permits, design packs, logistics, installation, acceptance, training, operations, maintenance, upgrades, decommission and recycling, done safely and recorded as evidence.
Layers · 8 · items · 62

5G and 6G radio access networks

The radio access network from site to spectrum: macro, small cells, DAS and repeaters, massive MIMO, NR bands and TDD synchronisation, NR features such as RedCap, positioning and sidelink, private and shared networks, Wi-Fi coexistence, 6G and ISAC, and the planning and assurance that keep it working.
Layers · 8 · items · 60

AI-RAN and Open RAN

Disaggregated, software-defined and AI-assisted radio access: the O-RAN architecture and its open interfaces, 7.2x fronthaul, RAN intelligent controllers with xApps and rApps, SMO and O-Cloud, accelerated L1, shared GPU infrastructure for RAN and AI, AI/ML in the 3GPP air interface, energy saving, and the test and integration work that makes multi-supplier RAN deployable.
Layers · 8 · items · 60

Core and transport networks

The networks behind the radio: the 5G core and its functions, slicing and edge breakout, IMS voice and emergency calling, fronthaul, midhaul and backhaul over microwave, E-band, fibre, free-space optics and satellite, IP/MPLS and segment routing, IPv6, automation and intent, and the security that holds it together.
Layers · 8 · items · 66

Satellite and space systems

The space segment end to end: orbits and constellations, spacecraft buses, communications and Earth observation payloads, inter-satellite links, tracking and command, space safety, launch, and the licensing and filings that let a system operate over a site.
Layers · 8 · items · 63

Ground segment

Everything on the ground that talks to spacecraft: gateways and teleports, user terminals, modems and software-defined radio, shared antenna networks, CCSDS protocol stacks, mission control, data processing and the spectrum coordination behind each earth station.
Layers · 7 · items · 59

Spectrum, timing and PNT

The shared foundations every network and sensor depends on: how spectrum is licensed, shared and monitored, GNSS positioning and its corrections, packet timing with PTP and SyncE, grandmasters and holdover, resilient PNT alternatives, and the detection of interference, jamming and spoofing.
Layers · 8 · items · 54

IoT, LPWAN and mesh

The radios, networks, gateways, device management and field protocols that connect low-power sensors and controllers to the grid, sized to a measured power budget.
Layers · 8 · items · 64

Power, energy and ruggedisation

How a remote site is powered, stored, distributed, cooled, sealed, tested, grounded, held up and kept safe, from a solar-powered sensor to a hybrid microgrid on a guyed mast.

Bring us the site.

Survey, design, deployment and operation for civil resilience. The form names who receives your details.

Talk to usPlan a deployment

The systems behind civil resilience.

Reference design, drawn to scale · drag to turn