AI for security and operations
AI security for every camera, every device and every gate
RCC’s AI watches your cameras with 290+ video analytics and a copilot that answers in plain words. QUME’s AI finds anomalies across laptops, phones and servers and drafts the fix. QWorks reads every truck at the gate. All of it runs on your own servers or fully air-gapped, quantum-safe, with evidence on every answer.
On premises or air-gappedQuantum-safe by defaultEvidence on every AI answer
1 / 36One quantum-safe core
Start with your job
What are you responsible for?
Sites, campuses or a city
RCCRaksha Control Center
One control room for every camera, door, alarm and incident, with sites that keep recording when the network drops.
290+ AI video analytics and a copilot that cites its evidence
IT security and endpoints
QUMEEndpoint management and security
Device management, patching, endpoint security, SIEM and network access in one console you can prove to an auditor.
AI insights that flag anomalies and draft the fix
A plant, warehouse or goods gate
QWorksGate and site apps
Faster gates with no paper registers: plate read, unloading, payment and the bill on one box that works offline.
AI plate recognition and yard analytics at the gate
Inside the products
See the AI and the consoles at work
The RCC copilot and QUME’s AI insights, then the consoles your teams work in: cameras, response flows and incident rooms in RCC, and devices, patching and audit evidence in QUME.
RCC · AI
Ask in plain words, and check every answer
The copilot finds people and vehicles by description, summarises incidents and briefs the next shift. Each statement cites the clip, event or record it came from. Pick a question: the copilot here runs on sample data.
- Search across video, events and records
- The search shown before it runs
- Names not found in the evidence removed and listed
RCCCopilot
Sees what you may seeSample data
Summarise incident INC-2291
- 1PPE alert21:16:08Gate 2 · Camera 07
- 2Clip21:15:50–21:17:10Held as evidence
- 3Guard note21:19:34Zone checked
At 21:16 the PPE analytic on Gate 2 camera 07 raised a helmet-missing alert in the unloading zone 1. The guard on duty reached the zone at 21:19 and logged that the worker was given a helmet 3. The clip is held as evidence 2.
1 name not found in the cited records was removed and listed
QUME · AI
Anomalies found, fixes drafted, a person decides
QUME’s AI reads the events from every device it manages, flags what is unusual and drafts the remediation. Open an insight to see its evidence and the drafted action, which waits for review.
- Anomalies, predictions and recommendations
- Drafted remediations and policies
- Reviewed by a person before anything acts
QUMEAI insights
Sample data
AnomalySign-ins at night from a new network on three finance laptops03:12
14 sign-ins between 02:10 and 03:40 on ws-fin-114, ws-fin-118 and lt-fin-031, from a network none of them has used before. Mapped to MITRE ATT&CK T1110, brute force.
Drafted Require step-up sign-in for the finance group and open an investigation with the three devices attached.
Waits for review by a person before it acts
Prediction38 laptops will miss Tuesday’s patch window09:40
At their current check-in pattern, 38 laptops in the sales ring will not be online before the window closes at 18:00 on Tuesday.
Drafted Move them to Wednesday’s ring and tell their owners, with the patch cached at their branch.
Waits for review by a person before it acts
RecommendationTurn off SMBv1 on 112 Windows servers10:05
SMBv1 is still enabled on 112 servers, and no client has used it in the last 30 days.
Drafted A drafted policy turns it off in three rings, with a rollback if a server reports a failure.
Waits for review by a person before it acts
RCC · Video management
Every camera on a site, live and accounted for
Cameras found on the network over ONVIF and added in one pass, each shown with its live picture, its state, its address and its model.
- Discovery and bulk import
- Live state for every stream
- Cards, a table or a list
QUME · Device management
Every endpoint, on five platforms, through one lifecycle
Android, Windows, macOS, iOS and Linux enrol into the same record, carry the same identity and move through the same states. The differences between platforms live in the agent, not in the operator’s head.
- Enrolment that proves the device
- Remote commands, signed and queued
- Asset register and inventory
- The device presents hardware-backed attestation: Android Key Attestation, Windows TPM 2.0, Apple App Attest.
- The server supplies the nonce and the certificate request is bound to the attested key, so a captured enrolment token cannot enrol a second machine.
- What the device could prove decides its trust tier, and every dangerous command checks the tier rather than flattening the fleet into “enrolled”.
RCC · Incident management
Response flows you can test before they run
An after-hours intrusion flow assigns the nearest guard, tells the control room and escalates when no one acknowledges. RCC Studio runs it on a virtual clock and checks every assertion before the flow rolls out.
- Steps, timers and escalations
- Simulation on recorded events
- Assertions that must pass first
QUME · Patch and vulnerability
Patch and vulnerability work that closes on evidence
A finding does not close because a command succeeded. QUME closes a finding only on evidence from the device, and rolls patches out in waves that stop when a wave goes wrong.
- Confirmation from the device itself
- Verification on a later inventory
- Operating system and third-party patches
Gate OPEN All three conditions hold, so the next ring may start.
- A wave installs across the estate in rings, a small canary first and then larger groups, with a gate between each pair.
- A gate has three conditions and all must hold: enough devices have reported, the soak has elapsed, and the failure rate among those reports is under the threshold.
- A device that never answered is unreachable, not failed. It blocks the gate rather than halting the wave or letting it complete against devices that never received it.
RCC · Command and control
One room per incident, with everyone who needs to be in it
Operators, guards in the field and an invited police officer share messages, a live camera view and sealed field photos in a room opened from the incident.
- Rooms opened from the incident
- Live views and evidence shared in place
- Calls, video and push-to-talk
QUME · Evidence and audit
Records that survive the person who made them
Audit is hash-chained, anchored with a post-quantum signature and verifiable offline, so an auditor can check the record without trusting the console that wrote it.
- Tamper-evident chain with anchors
- Offline verification
- Write-once archive
- Every entry carries the hash of the entry before it, so the record is a chain and not a list.
- Anchors are signed with ML-DSA-65 and published; a standalone verifier checks an export against the public key alone, with no access to the running system.
- An altered entry does not fail quietly. The chain breaks at that entry, and the break is located rather than suspected.
RCC (Raksha Control Center)
Start with the VMS. Grow into a control room.
RCC is a video management system and a security operations platform in one. It runs your cameras, AI analytics, access control and alarms from one operator console, keeps every site recording when the network drops, and works with the cameras and systems you already own.
- Every site runs RCC on its own servers: video, analytics, access and alarms.
- Events and their video reach one command centre, where operators see every site together.
- A site whose link fails keeps recording and deciding locally, and catches up when the link returns.
QUME
Five security tools. One console you can prove to an auditor.
QUME replaces separate device management, patching, endpoint security, SIEM and network access control for Windows, macOS, Linux, Android and iOS. Every wipe needs a second approver, every patch is confirmed on the device, and every action lands in an audit trail your auditor can verify offline.
Today: a product for each job
- Device managementMDM and UEM
- Patch and vulnerabilityscanners and patch tools
- Endpoint securityhardening and device control
- Detection and SIEMlog collection and correlation
- Network access controlRADIUS and 802.1X
QUMEOne console
- Device management
- Patch and vulnerability
- Endpoint security
- Detection and SIEM
- Network access control
One agent, one policy, one audit trail
QWorks
Gate entry, unloading and the bill, on one box
QWorks Gatehouse reads every truck’s number plate, alerts your unloading team, records what was unloaded, collects payment by UPI or card and prints the bill, all on one box at your gate. It keeps working when the internet is down, on a licence you buy once.
- Every step of the visit is recorded as it happens.
- Payment and the bill close the commercial side.
- The visit is sealed in a hash-chained register that cannot be quietly edited.
Industries
Ready for your industry
Solutions for each industry, built from RCC, QUME and QWorks on the same console.
RCC · QUME · QWorksIndustrial and manufacturing
PPE, restricted zones, permits and goods gates
RCCSmart cities and public safety
ICCC: command and control, dispatch and public warning
RCC · QUMEHospitals and healthcare
Restricted wards, infant protection and visitor control
RCC · QUMEBanking and financial services
Branches, ATMs and every endpoint, audit-ready
RCC · QWorksPorts and logistics
Gates, yards and docks, with trucks checked at entry
RCCCampus and education
Safeguarding, attendance, arrivals and pickups
RCCTransport and traffic
Enforcement, signals, depots and fleets
RCC · QUMEGovernment and defence
Sovereign and air-gapped deployments
Built to be trusted
Quantum-safe. Air-gapped ready. Tamper-evident.
Hybrid post-quantum encryption on the connections and records that matter, deployment in the cloud, on premises or with no internet at all, and records anyone can verify offline.
Quantum-safe
Data recorded today stays private when quantum computers arrive.
Air-gapped ready
Updates and licences arrive offline; nothing needs to reach out.
Tamper-evident
Hash-chained audit and sealed evidence, verifiable with a public key.
Open standards
ONVIF, OIDC, RADIUS, BACnet and the other protocols your estate speaks.
Guides
Practical guides for security, IT and site leaders
Security and citiesHow to choose a VMS for a multi-site estate
A checklist for choosing a video management system across many sites: your cameras, recording you can prove, evidence that holds, and room to grow.
IT and CISOsMDM, patching, EDR, SIEM and NAC: what consolidating changes
What changes when device management, patching, detection and network access share one agent and one console, what to keep, and how to build the case.
Plants and gatesHow to cut truck turnaround at a factory gate
Measure where gate time goes, fix the usual delays at entry, unloading, paperwork and payment, and work out what the hours cost with your own numbers.
See it on your own cameras, devices or gate
Tell us what you run. We will show you RCC, QUME or QWorks, and the AI in each, on your own sites and systems.





































