The Infrastructure Layer
for Automated Threat Defense

The Gap in the Market

CrowdStrike, Recorded Future, and Palo Alto sell threat intelligence for $100,000–$500,000/year. That prices out the vast majority of network operators, MSPs, and mid-market enterprises.

Meanwhile, 40,000 managed service providers and 3,000+ ISPs with their own AS numbers need automated threat defense but have no affordable option that operates at the network layer.

SATIS fills that gap: automated, network-level threat enforcement at $299–$999/month — 30x cheaper, with BGP-level blocking that host-based solutions can't match.

Revenue Projections

Assumes 10% annual churn, 85%+ gross margin. Infrastructure cost scales sub-linearly (blockchain is shared, each peer adds ~$5/mo).

What's Built & Running

• Permissioned MultiChain blockchain — 5 nodes, 7,000+ blocks, 12,000+ threats processed
• 3,000+ active BGP blackhole routes announced via BIRD 2 (AS64999)
• Automated nftables enforcement on every node
• WireGuard encrypted mesh with IPv6 native (own /64 allocation)
• 7 automated threat feed sources: fail2ban, AbuseIPDB, Spamhaus DROP, Blocklist.de, AlienVault OTX, Emerging Threats, CINS Army
• Customer portal: self-service signup, API keys, BGP peering, severity control
• Peering config generator for 5 platforms (OpenBSD, Linux/BIRD, Linux/FRR, Cisco, Juniper) — RTBH verified end-to-end in production
• Full REST API with SSE streaming, 15 website pages, channel partner program
• Automated PDF threat intelligence reports — daily, weekly, and custom date range with executive summaries, ASN analysis, geographic distribution, and severity breakdowns
• Stripe billing integration, Terms of Service, privacy policy
• U.S. provisional patent filed (March 2026) — 20 claims covering blockchain threat distribution, BGP blackhole enforcement, consumer appliance, and portal-based self-service enrollment
• Reports formatted to reference NIST CSF and CISA BOD 22-01 (known exploited vulnerabilities) categories

Competitive Moats

• Own AS number (AS23026) — can peer directly at the BGP level, most competitors can't
• Network effects — every customer running fail2ban contributes threats back; more nodes = better data
• High switching cost — BGP integration into routing infrastructure is sticky; customers don't churn lightly
• Near-zero marginal cost — blockchain and feeds are shared; each new customer costs ~$5/mo
• Immutable audit trail — blockchain ledger provides compliance-grade evidence of threat detection and response
• Open standards — built entirely on nftables, BIRD 2, WireGuard; no vendor lock-in
• Price disruption — 30x cheaper than enterprise alternatives while operating at a layer they can't (BGP)
• Audit-trail architecture — immutable blockchain ledger provides evidence of every threat detection and enforcement action; built with NIST CSF and CISA reporting categories in mind (no formal SOC 2 audit or certification yet)
• Patent-pending IP — 20-claim provisional patent covering the blockchain + BGP enforcement architecture; defensible against replication by larger competitors