What Drishti Does
Entity Resolution
Cross-domain entity graph powered by Apache AGE. E.164 phone matches create automatic relationship edges. USERNAME-only matches route to analyst review. POSSIBLY_SAME_AS edges widen candidate sets without false ownership chains.
Multi-Domain Fusion
Maritime, aviation, financial, social, procurement, sanctions, registry — all normalised into a canonical event schema and fused on the entity graph. Every connector emits to Redpanda; normalizers consume independently.
Real-Time Alert Engine
Event-driven rules fire on every entity update — no polling lag. CRITICAL alerts require ≥2 independent source domains. Rules read only from PostgreSQL baseline snapshots; ClickHouse is never on the hot path.
Evidence Bundles
SHA-256 signed, immutable tar.gz bundles — alert record + entity snapshots + all MinIO raw objects via raw_evidence_ref chain. Once generated, a bundle is never modified. Court-admissible by design.
Designed to be Audited
Every architectural decision in Drishti was made to be defensible to a security examiner.
ClickHouse is never on the hot path. Decision services read only from PostgreSQL. No unbounded latency on the alert engine.
CRITICAL alerts require ≥2 independent domains. Single-source CRITICAL alerts are rejected at startup — unacceptable false-positive rate in a national security context.
Evidence bundles are immutable. SHA-256(manifest.json) is the court reference. Regeneration breaks chain of custody — write-once, never overwrite.
Field Use Cases
Dark Vessel Detection
A vessel goes dark off the coast. Drishti's dark-gap-engine detects the AIS gap, correlates with procurement filings and sanctions records, and fires a multi-domain CRITICAL alert — with a linked entity graph and evidence bundle — within seconds of the gap appearing.
Shell Company Mapping
A procurement contractor links via phone number to three previously unconnected entities in the registry and financial domains. Drishti traverses the ownership graph, flags the SHELL_FOR relationship, and routes to analyst review before the contract clears.
Prosecution Package
An analyst pins an open alert to a case, exports an evidence bundle — SHA-256 signed tar.gz containing the full entity snapshot, raw evidence references, and alert record. The bundle is immutable from the moment of generation. Court-ready.
Production-Grade Infrastructure
Every component is open-source and self-hostable. No foreign SaaS in the pipeline.
The Flagship
Request a Classified Briefing
Drishti engagements are direct. No public sales funnel. Message us on WhatsApp.
Message us on WhatsApp+91 9901938800