Government Suite
Finished intelligence for government, defense and public safety: the brief, the picture and courses of action, delivered on Sentinel.
Intelligence as a service
Sentinel puts finished intelligence on the watch floor and in the field: a brief for the shift, one map of the mission and courses of action from your own plan. The first report, often on a local channel in another language, is where our work starts.
Sentinel is the Government Suite's platform for publicly available information. It runs the common operating picture, the field apps and delivery to each operator.
Reporting by the Artorias intelligence platform, which feeds Sentinel. As of 5 Oct 2026.
Nemesis for operations centers
Set tripwires on the mission's own parameters. When one is crossed, Nemesis drafts three courses of action from your plan.
A HIGH report inside the western Black Sea watch area crossed the maritime tripwire. Three courses of action follow, drawn from the plan.
Send the plan's maritime advisory to flagged vessels and their agents in the corridor. Attach the report and its location. Ask for position reports every four hours.
Low. An advisory changes no transit plans and uses a channel already in the plan.
High. The advisory list and the channel are kept current in the plan.
Illustrative plan, tripwire and courses of action. The trigger is the real report of 13 Oct 2026, 05:35Z.
Briefing
The briefing counts the window by severity, country and category. The most significant reports sit on top, linked to the map.
| Sev | Headline | Regions | When |
|---|---|---|---|
| HIGH | Two Vessels Struck by Drones Off Coast of Bulgaria, One Sunk | BGR | 24m |
| HIGH | Russian Airstrikes Inflict Significant Damage on Kyiv and Kharkiv Despite Declared Ceasefire | UKRRUSUSA | 2h |
| HIGH | Saudi Civil Defense Issues Threat Alert in Khamis Mushait Following Houthi Strike Claim | SAUYEM | 9h |
| HIGH | Airstrikes Target Yemeni Capital Sana'a Amid Escalating Hostilities | YEM | 9h |
| HIGH | Incoming Drones Briefly Halt Flight Operations at Moscow Airports | RUS | 9h |
| HIGH | Six Explosions Reported in Kyiv Following Ballistic Missile Strikes Without Air Raid Warning | UKR | 10h |
| HIGH | Russian Strikes Target Six Energy Infrastructure Facilities in Ukraine | UKRRUS | 10h |
| HIGH | Dozens of Casualties Reported as Clashes and Airstrikes Strike Taiz Governorate | YEM | 16h |
Sentinel's web interface, rebuilt with public reporting as Sentinel received it: the first report of each story from 12 Oct 06:00Z to 13 Oct 2026 06:00Z (1,065 reports, 152 countries). Categories come from Sentinel's keyword tables, since the public reports carry none.
Common operating picture
Countries shade by the weight of the last day's reporting. Select a report to read its assessment beside the map.
Same snapshot, filtered to HIGH. Shown rows are events; the window count and the country shading keep every report.
Story threads
New facts join the first report as updates. Later reports on the same story join the thread instead of reaching you one by one.
Two Vessels Struck by Drones Off Coast of Bulgaria, One Sunk
Two vessels were struck by drones off the coast of Bulgaria in the Black Sea, causing one to sink.
Single-source at time of publication
Sentinel on iOS and Android
Sentinel runs on iOS and Android with the same account and mission scope. On a weak link it asks first, then drops the map and keeps essential reporting flowing.
Home. The last day's reports on the globe.
Ukraine, newest first, in the bottom sheet.
The Black Sea report, 05:35Z.
Low Data Mode. The map gives way; the feeds keep coming.
Integrations and API
Published reports leave Sentinel as Cursor on Target events, a filtered stream, webhooks and structured exports. Machine clients connect with issued API keys.
<?xml version="1.0" encoding="UTF-8"?>
<event version="2.0" uid="sentinel-e402161d-685a-46f2-bd87-81d30841fa3c" type="a-u-S"
time="2026-10-13T05:35:26.881090Z" start="2026-10-13T05:35:26.881090Z"
stale="2026-10-13T06:35:26.881090Z" how="m-g">
<point lat="43.15" lon="28.5" hae="0" ce="9999999" le="9999999"/>
<detail>
<contact callsign="SENTINEL-IMMEDIATE"/>
<remarks>Two Vessels Struck by Drones Off Coast of Bulgaria, One Sunk - Two vessels were struck by drones off the coast of Bulgaria in the Black Sea, causing one to sink.</remarks>
<_sentinel_ severity="HIGH" category="MARITIME_AVIATION"
id="e402161d-685a-46f2-bd87-81d30841fa3c" countries="BGR"/>
</detail>
</event>The 05:35Z report as Sentinel's TAK endpoint writes it, indented for reading.
Method
The brief, the picture and the plan above come from one cycle, run from your requirements to a decision. The chapters that follow show where it starts: the mission's scope, then the reporting itself.
We set countries, command regions, categories and a severity floor with your team. They become Sentinel's mission profiles.
Local social media channels, regional media platforms and news agencies in 68 languages. Original text is kept, with translation on demand.
Reports pass the 112-point validation process before they reach you. Repeats are held back, and the first report becomes the warning.
Each report carries an assessment, a rating and a location. Daily country briefs and story threads follow events as they develop.
The web picture, the iOS and Android apps, push, email, SMS, PDF, Cursor on Target and an API.
When a tripwire is crossed, Nemesis drafts courses of action from your own plan, each with a risk level.
Mission scope
A mission profile sets the severity floor, command regions, countries, categories and keywords. Watchlists and geofences drawn on the map narrow it further.
Profile, alerting, interface. Mobile & web stay in sync.
A profile is a saved filter: countries, categories, severity floor, keywords. Subscribe for push notifications; mark one as default for the COP.
"attack""threat""IED""ambush""hostile""force protection""mobilization""escalation""buildup""deployment""posture""earthquake""tsunami""hurricane""flood""wildfire""volcano""ransomware""breach""DDoS""zero-day""APT""exploit""vessel""aircraft""shipping lane""NOTAM""piracy""airspace""chemical""biological""radiological""nuclear""contamination""hazmat"The profiles shown are the presets Sentinel ships with.
Global feed
Search the loaded reports, or run a deep search across the full index. Each row carries severity, category, region and corroboration.
| Sev | Headline | Category | Regions | Corr. | When |
|---|---|---|---|---|---|
| HIGH | Two Vessels Struck by Drones Off Coast of Bulgaria, One Sunk e402161d | Maritime · aviation | BGR | ×2 | 24m |
| MEDIUM | Mauritius Closes Schools and Childcare Centers Nationwide Amid Security Concerns 250f68cd | Civil unrest | MUS | – | 38m |
| LOW | Magnitude 6.1 Earthquake Shakes Western Panama Near Rio Grande a59a6883 | Natural disaster | PAN | ×2 | 2h |
| HIGH | Russian Airstrikes Inflict Significant Damage on Kyiv and Kharkiv Despite Declared Ceasefire 2bdaec51 | Armed conflict | UKRRUSUSA | – | 2h |
| MEDIUM | Ecuador Records Six River Overflows and Five Active Wildfires Across Five Provinces 10d2de0a | Natural disaster | ECU | – | 2h |
| MEDIUM | Train Accident Reported Across Pakistani Rail Network e57c3806 | Infrastructure | PAK | – | 3h |
| MEDIUM | North Korea Fortifies Coastal Border Infrastructure North of Ganghwa Island eb9f21d7 | Armed conflict | PRKKOR | ×3 | 3h |
| LOW | Shamonda Virus Detected in Portugal Cattle Herds 429a01ed | Public health | PRT | – | 8h |
| MEDIUM | Houthi Forces Launch Sustained Shelling on Residential Neighborhoods in Taiz 40239b57 | Armed conflict | YEM | ×7 | 8h |
| HIGH | Saudi Civil Defense Issues Threat Alert in Khamis Mushait Following Houthi Strike Claim 47bd6856 | Armed conflict | SAUYEM | – | 9h |
| HIGH | Airstrikes Target Yemeni Capital Sana'a Amid Escalating Hostilities 4a23ba71 | Armed conflict | YEM | ×2 | 9h |
| HIGH | Incoming Drones Briefly Halt Flight Operations at Moscow Airports 246cc9bc | Maritime · aviation | RUS | – | 9h |
| MEDIUM | Russian Strike Collapses Residential Building Entrance in Kharkiv fe6a6d0b | Armed conflict | UKR | ×3 | 10h |
| HIGH | Six Explosions Reported in Kyiv Following Ballistic Missile Strikes Without Air Raid Warning 008b1911 | Armed conflict | UKR | ×6 | 10h |
| 14 OF 1,065 SHOWN | |||||
Same snapshot. The severity tabs work.
Country feed
Open a country to read its high-frequency stream. Sentinel writes a daily brief for each country with reporting.
| Sev | Headline | Category | When | |
|---|---|---|---|---|
| HIGH | Russian Airstrikes Inflict Significant Damage on Kyiv and Kharkiv Despite Declared Ceasefire | Armed conflict | 2h | |
| MEDIUM | Russian Strike Collapses Residential Building Entrance in Kharkiv Russian evening strikes on Kharkiv collapsed an entrance of a five-story apartment building in the Kholodnohirskyi district, potentially trapping residents and causing multiple casualties. | Armed conflict | 10h | |
| HIGH | Six Explosions Reported in Kyiv Following Ballistic Missile Strikes Without Air Raid Warning At least six explosions and ballistic missile strikes were reported in Kyiv on the evening of October 12, with warning sirens reportedly failing to activate in advance. | Armed conflict | 10h | |
| HIGH | Russian Strikes Target Six Energy Infrastructure Facilities in Ukraine Russian forces have launched attacks targeting six energy infrastructure facilities across Ukraine. | Infrastructure | 10h | |
| LOW | Russian Attack Kills One and Injures Two in Kyiv Oblast A Russian attack in Kyiv Oblast resulted in one fatality and two injuries. | Armed conflict | 13h | |
| MEDIUM | Russian Drone Strike Kills Civilian and Injures Seven in Lozova A Russian drone strike on a residential area in Lozova, Kharkiv region, killed one woman and injured seven others, including a child. | Armed conflict | 16h | |
| MEDIUM | Russian Smerch Cluster Strike Kills Three Civilians in Donetsk Oblast Russian Smerch cluster munition strike on Cherkaske, Donetsk Oblast, kills three civilians including a child and injures four. | Armed conflict | 16h | |
| MEDIUM | STATE MEDIA CLAIMS: Power Outage Leaves Approximately 50,000 Subscribers Cut Off in Luhansk An infrastructure accident in Luhansk has cut power supply to approximately 50,000 subscribers, prompting emergency repair operations. | Infrastructure | 20h | |
| MEDIUM | Russian Strike on Kharkiv Apartment Complex Injures Five and Collapses Multiple Floors A Russian strike on a high-rise apartment building in Kharkiv's Kyivskyi district injured five people and collapsed multiple floors, triggering emergency search operations. | Armed conflict | 23h | |
Ukraine, same snapshot. Rows open in place.
Cyber feed
Cyber threat intelligence runs on its own schema: CVEs, CVSS and EPSS scores, ATT&CK techniques and recommended actions. It sits beside the main picture, not in place of it.
| Sev | Headline · summary | Category | CVSS | EPSS | Kill-chain | IOC | Conf. | When |
|---|---|---|---|---|---|---|---|---|
| HIGH | A public code repository contains a public exploit and mass scanner for CVE-2026-91136, an unauthenticated arbitrary file read vulnerability in Divi Plus <= 2.4.0. CVE-2026-91136MITRE T1190 · T1005 +1 | Vulnerability | 7.5 | 1% | exploitation | 2 | 100% | 6h |
| HIGH | A ransomware group named Safepay has listed (name withheld) as a new victim on a leak site, indicating a successful ransomware attack. MITRE T1486 · T1657 | Malware / Ransomware | – | – | actions-on-objectives | 1 | 100% | 9h |
| HIGH | The Orova ransomware group has posted (name withheld) as a new victim on their leak site. MITRE T1486 · T1567 | Malware / Ransomware | – | – | actions-on-objectives | 0 | 100% | 10h |
| HIGH | A malicious TLS certificate has been identified as part of the Command and Control (C2) infrastructure for the PureLogsStealer malware. MITRE T1071.001 · T1573.002 | Malware / Ransomware | – | – | c2 | 1 | 100% | 10h |
| HIGH | A malicious TLS certificate associated with Vidar stealer's Command and Control (C2) infrastructure has been identified. MITRE T1071.001 · T1573.002 | Infrastructure | – | – | c2 | 1 | 100% | 11h |
| HIGH | The Qilin ransomware group has listed (name withheld) as a new victim on their leaksite. MITRE T1486 · T1657 +1 | Malware / Ransomware | – | – | actions-on-objectives | 0 | 100% | 12h |
| HIGH | The 'dark project' ransomware group has claimed (name withheld) as a victim, stating the attack disrupted operations and compromised customer and employee data. MITRE T1486 · T1489 +1 | Threat actor | – | – | actions-on-objectives | 0 | 100% | 12h |
Summary
A public code repository contains a public exploit and mass scanner for CVE-2026-91136, an unauthenticated arbitrary file read vulnerability in Divi Plus <= 2.4.0.
Scoring
CVEs
MITRE ATT&CK
Recommended actions
Sentinel's cyber feed, same window (205 reports), repeats held back. Victim and platform names withheld. Select a row to open it.
Deployment
Sentinel handles publicly available information only. One account and one settings record serve the web picture and the field apps.
How to get AGC
Step 1
Step 2
Step 3
Request a briefing. We will show you what we read around your mission today.
access@artorias.com