Case study · Network security
REEF
A local-first network-visibility and gateway-defense system that makes everything on the wire — and at the OPNsense gateway — visible and understandable to someone never trained to read it. Governed automation: it acts only on your approval, and every action can be undone.
Home and small-business networks are attacked with enterprise-grade tooling but defended, if at all, by people who were never trained to read a packet capture. REEF closes that gap: it turns raw network telemetry into one plain-language card and a safe, reversible action — without sending a single byte to someone else's cloud.
Detection
A named sensor fleet, one fused picture
Individual tools each see a slice of the truth and each cry wolf in their own dialect. REEF runs them as a coordinated fleet and treats a signal as real only when independent sensors corroborate it.
An E-2 Hawkeye AWACS controller fuses the corroborating signals into a single high-confidence card — not seven overlapping alerts. One event, one confidence score, one explanation.
Response
The Bouncer does the whole job — on your say-so
See it
The fused card surfaces what happened on the wire and at the gateway, in one place.
Explain it
Plain language, no jargon — what it is, why it matters, and what's at risk, for someone never trained to read it.
Propose the fix
A concrete, scoped remediation at the OPNsense gateway — presented, not executed.
Act only on approval
Nothing changes until you say so. Every change is PIN-gated, backed up before it runs, and fully reversible.
Why it satisfies governance
Automation that stays inside human authority
Approval-gated
The system proposes; a human authorizes. No autonomous changes to your security posture.
Reversible
Every action is backed up before it runs and can be rolled back to a known-good state.
Audited
PIN-gated actions leave a provenance trail — the record an incident review needs, generated as it runs.
Local-first
All analysis happens on your hardware. No telemetry leaves the network; the breach surface stays minimal.
Next step
Governed automation for regulated networks
REEF is the network-defense expression of the wider thesis: automation you can explain, approve, and undo.