Collect
Authorized signals from identity, endpoints, networks, cloud, IoT and physical systems.
The intelligence plane behind cyber-physical defense.
Harpia connects digital, physical and connected evidence so Bellot services can detect behavior, establish context, prioritize risk and support controlled action.
The operating problem
More telemetry does not automatically create more understanding.
Security evidence is distributed across systems owned by different teams. Bellot connects that evidence without pretending every environment is identical or every decision can be automated.
Intelligence pipeline
Signals → evidence → context → controlled action.
Normalize
Preserve provenance while translating different formats into a consistent evidence model.
Correlate
Connect entities, behavior and time to reveal relationships that isolated alerts cannot show.
Contextualize
Relate technical evidence to the asset, process and operational consequence.
Prioritize
Rank investigations by evidence, exposure and business relevance—not alert volume.
Respond
Recommend or execute governed actions according to explicit policy and human authority.
Harpia
The proprietary security intelligence engine embedded across Bellot services.
Harpia provides the shared intelligence architecture for SOC/MDR, threat detection, networks, IoT and computer vision. It organizes normalized events, findings, cases, risk, policy and auditable response while keeping available capability, scoped engineering and research distinct.
Explore HarpiaEvidence
Traceable inputs and preserved provenance.
Control
Human authority over consequential actions.
Maturity
Operational, engineering and research claims remain distinct.
Cyber-physical evidence
One investigation can begin in six different systems.
The value is not collecting everything. It is preserving provenance and relating only the signals that change a defensive decision.
Identity
Sessions, privilege and access behavior
Endpoint
Process, file and host evidence
Network
Flow, DNS and communication behavior
IoT
Device identity, state and deviations
Vision
Zones, objects and physical events
Operations
Assets, processes and consequence
HarpiaContext · correlation · priority
Embedded intelligence
AI is a layer inside defense—not a detached consulting offer.
SOC & MDR
Prioritize cases, enrich investigations and improve detection coverage.
Threat Detection
Model behavior, identify anomalies and support threat hunting.
Network & IoT
Relate communication, device identity and operational context.
Computer Vision
Convert visual events into governed evidence for correlation.
Cyber-Physical
Connect physical and digital signals into one incident hypothesis.
Post-Quantum
Support discovery, classification and migration prioritization.
One environment. One exposure. Clear priorities.