Public demand signal · Communications Security Establishment Canada
Major-event and critical-infrastructure cyber defence
CSE describes coordinated cyber-security support for major events, host organizations and critical infrastructure through threat intelligence, technical guidance, briefings, exercises, onboarding and operational coordination.
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
Source-backed fact
What success looks like
Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
Our assessment
How reviewed capability may contribute
The reviewed records suggest that managed threat detection and response, external cyber-threat intelligence and secure communications may contribute most directly. General analytics, ISR and radio software remain broader adjacent records that warrant more scrutiny.
The first reviewed records include External cyber-threat intelligence, Cyber threat detection and response, Managed detection and response.
Start with the clearest reviewed connections
Specific capabilities to inspect first
These records appear first because their published descriptions are more functionally specific to the released need. The order is a discovery aid and does not express supplier preference, endorsement or eligibility.
Identity-focused external threat intelligence covering exposed credentials, stealer logs, criminal forums and ransomware activity, with multi-tenant workflows for managed service providers.
Discovery grouping · Description mentions the core function
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
External cyber-threat intelligence may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, cyber and digital operations, and protection and survivability.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
The official capability material supports the named External cyber-threat intelligence offering and the bounded operational description prepared for reviewer consideration.
Atlas combines managed detection and response, exposure validation and agentic investigations governed by human controls, with AIDR adding desktop AI-session observability and policy enforcement.
Discovery grouping · Description mentions the core function
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Cyber threat detection and response may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, cyber and digital operations, and protection and survivability.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
The official capability material supports the named Cyber threat detection and response offering and the bounded operational description prepared for reviewer consideration.
Field Effect combines managed detection and response with a 24/7 security operations service across supported endpoint, cloud, network and AI activity. Its packages differ: Endpoint focuses on devices, Core adds cloud services, and Complete markets broader network and AI coverage with additional reporting and expert services. AIDR adds discovery and oversight of AI applications, agents and tool activity. Published response-time figures are vendor metrics; actual telemetry coverage, response authority and service commitments depend on the customer’s deployment and agreement.
Discovery grouping · Description mentions the core function
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Managed detection and response may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Field Effect MDR is described as covering endpoints, cloud-based services and networks, with proprietary Actions, Recommendations and Observations alerts and configurable security reporting.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
The official capability material supports the named Managed detection and response offering and the bounded operational description prepared for reviewer consideration.
12 additional reviewed assessments
Remaining published connections
Additional and broader connections remain available with their complete reviewed rationale and supporting evidence.
Agile’s EMSO command-and-control software combines information from sensors and effectors into a common operating picture. The company describes statistical estimation of emitter positions, allocation of sensing and countermeasure resources, and machine-learning refinement of the picture.
This is the coordination layer around RF equipment. Its practical integration depends on which devices supply data, how observations are represented and timed, and how tasks are returned to the sensors or effectors. The public description does not identify those APIs, message formats, supported hosts or compatible product versions.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
EMSO command-and-control system may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
Libra turns radar, RF, optical, acoustic and Remote ID inputs into an airspace picture with classification, tracking and operator alerts. AirMatrix offers different configurations: Remote ID awareness, passive-RF sensing, Shield 360 with four radar panels and a pan-tilt-zoom verification camera, and Dominion with radar, RF and optical integration plus a non-kinetic mitigation offering. A sensor detection, visual confirmation and permitted response are separate parts of that chain.
Palladium addresses the operating records around drone activity: fleets, pilots, authorizations, incidents and risk assessment, with APIs for integration. It can therefore serve a different team or workflow from a Libra security installation. AirMatrix’s FAA-listed LAANC service concerns US airspace authorizations; Canadian permission and any mitigation authority remain specific to the proposed operation.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
AI airspace command and uncrewed traffic management may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
The official capability material supports the named Drone operations and airspace software offering and the bounded operational description prepared for reviewer consideration.
SecuSUITE supplies encrypted voice, messaging and files for approved mobile and desktop endpoints, with PBX integration and controlled deployment options. NIAP's January 2026 evaluation covers Server 6.0; clients are evaluated separately, so server approval does not establish every integrated deployment.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Secure communications and embedded software may help teams working on Major-event and critical-infrastructure cyber defence by contributing to resilient communications and command, cyber and digital operations, and protection and survivability.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
The official capability material supports the named Secure communications and embedded software offering and the bounded operational description prepared for reviewer consideration.
Larus Foresight combines multi-source data fusion, predictive analysis, scenario simulation and optimization for operational planning, maritime awareness and all-domain decisions. Larus describes Canadian Army and RCN work and ongoing integrations with industry partners. ScenarioGPT remains a separately funded development and integration effort, rather than proof that every Foresight configuration includes a production-ready simulation assistant.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
AI-enabled multi-sensor decision support may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, cyber and digital operations, and protection and survivability.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
The product page describes AI and machine-learning fusion of active and passive sensors, trackers, reports, weather, and other data for recognition and prediction.
Magnestar describes 24/7x as a platform that combines spectrum modelling with ISR, imagery and other data, governance and knowledge-graph reasoning to support operator decisions and configured actions.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
24/7x spectrum-management technology may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
Magnestar's 24/7x software combines satellite-spectrum data, interference simulation models and coordination workflows to identify potential communication conflicts and support interference-free satellite operations.
AURORA BLACK extends MDA's broadband and direct-to-device satellite lines with defence-focused connectivity and resilience features. Announced in September 2026, the public description establishes product intent rather than operational acceptance.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
AURORA BLACK defence-focused software-defined satellites may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
MDA introduced AURORA BLACK on September 10, 2026 as a defence-focused extension of its broadband and direct-to-device software-defined satellite lines. It describes secure end-to-end connectivity, onboard anti-jamming, GPS-spoofing resistance and perimeter/proximity sensing; the release supplies product intent, not operational acceptance evidence.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
Clarity combines spectral data preparation, material or anomaly analysis and reviewable outputs across Earth observation, industrial sorting and emissions workflows. Geo processes selected satellite and airborne imagery; integrations include a customer-provisioned Python SDK and support-assisted ArcGIS Pro add-in.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Clarity Spectral Intelligence Platform may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
The official product or service material supports the named hyperspectral capability, its principal features and the applications summarized for reviewer consideration.
Norsat supplies satellite terminals and microwave components, including configurable ATOM Ku/Ka transmitters and LEO ground-terminal components. Its ATOM Ka 25/50 W labels refer to saturation: the corresponding listed linear outputs are 41/44 dBm, approximately 12.6/25.1 W. Bands, control interfaces, reference input and thermal management depend on the selected unit. SGS certificate CA14/553403 covers Richmond satellite-component and system quality management through August 2029, subject to surveillance; it is not individual mission qualification.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Rugged satellite terminals and RF components may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
The official capability material supports the named Satellite communications equipment offering and the bounded operational description prepared for reviewer consideration.
Orthogone combines FPGA and embedded-system engineering with a licensed ultra-low-latency framework. The framework supplies Ethernet MAC/PCS, TCP/UDP offload, PCIe DMA, Linux drivers and a C/C++ interface for host-to-FPGA integration. Current reference designs support AMD Alveo X3522pv and UL3524; Versal V80 support is listed on the roadmap. Published component and host-transfer latency figures measure different paths and should not be treated as end-to-end application performance. Altera’s partner listing corroborates its FPGA engineering service offering.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
FPGA and embedded-systems engineering may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
Orthogone develops custom FPGA, embedded-computing and electronic-product solutions, including communications, radar, signal-processing and real-time systems for harsh, safety-critical and regulated environments.
RIA RAN brings machine-learning inference into software-defined radio and open 5G radio-access functions. Rather than supplying an entire 5G network, it provides software and integration work that operates alongside the radio stack. ESA's RIA RAN NTN project documents a modified srsRAN plug-in on the distributed-unit processor, USRP radio hardware, an ARM or x86 host, open5GS and Qoherent's inference engine for adaptive radio-resource assignment.
RIA Toolkit supports the surrounding engineering process: creating and curating datasets, training and evaluating models, benchmarking an application, and integrating and deploying it. RIA Hub describes synthetic data from Python, GNU Radio and MATLAB alongside live SDR recordings. SigMF pairs retain signal data with recording metadata, while Git LFS and package versioning support collaboration around large RF datasets and software dependencies.
ESA's published June 2025 status records design, benchmarking and early field work informing requirements, with scheduler and testbed development continuing. The architecture is therefore useful as a concrete integration reference. Current performance and delivery maturity depend on the selected hardware, radio-stack versions and model. NATO DIANA's separately described adaptive 5G mobile-ad-hoc payload should not be assumed to be this same configuration.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Radio Intelligence Applications for 5G RAN may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
Qoherent's radio-intelligence tooling brings machine-learning model development, data management and low-latency inference into software-defined radio and open 5G radio-access-network environments.
JASCO combines underwater acoustic instruments, onboard processing and analysis services. OceanObserver processes and streams selected data from buoys, gliders and cabled platforms; AMAR G4 is optimized for autonomous recording. These roles differ in power, storage and communications requirements. JASCO describes Slocum glider integrations for environmental acoustic measurements and UWSU transient-detection and ownship-noise work. DND identifies JASCO as a UWSU subcontractor, supporting the programme relationship without establishing current fleet-wide acceptance.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Underwater acoustic defence systems and analytics may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, cyber and digital operations, and protection and survivability.
Communications Security Establishment Canada · official report
Reviewer synthesis of the public end state in the cited material: Event partners should be able to prepare for, detect and respond to cyber incidents through integrated threat intelligence, technical support, exercises and operational coordination before and during major events.
PAL combines special-mission aircraft design, modification, operations and support with CarteNav C4ISR software. AIMS-ISR integrates onboard sensors and operator workflows; AIMS-C4 provides a ground common operating picture and mission-data archive. Air Greenland confirms a contract for two Dash 8 missionizations, with integration, certification and training still ahead in the programme.
Discovery grouping · Broader published connection
Grouped by wording in the published capability description. This is a navigation aid; the reviewed connection below and its sources establish the limits.
Our assessment · Reviewed connection
Airborne C4ISR and special-mission solutions may help teams working on Major-event and critical-infrastructure cyber defence by contributing to detection and situational awareness, resilient communications and command, and cyber and digital operations.
The cited capability source describes airborne c4isr and special-mission solutions and the concrete features and applications summarized in this candidate.
Communications Security Establishment Canada · official report
High-profile events and their host organizations create concentrated cyber-risk and require coordinated planning, monitoring, incident response, exercises and secure information sharing across federal, provincial, municipal and private partners.
Related discovery lenses
Mission areas connected through reviewed technology
These are True North Map discovery lenses, not released requirements or procurement direction.
Autonomous Patrol and Monitoring
8 technologies connect this lens to the released need through separate reviewed records.
An empty result means the research is incomplete, not that Canada lacks relevant technology.
Public statements do not establish procurement timing, budgets, eligibility, or endorsement.
Every future assessment must remain source-linked and open to editorial review.
Continue exploring
Continue from the defence need into the evidence graph
Follow reviewed organization connections, Mission areas derived through named capabilities, the focused map, and direct or clearly labelled derived editorial paths.
Organizations
Profiles that provide the strongest reviewed or discovery-led continuation.
