Deployment

A full-stack web app. On-prem today. Marketplace soon.

GeoTactical Insights is a full-stack web application — not a Windows download and not a ZIP. Deploy it on-prem as easily as any modern web stack; AWS, Azure and Google Cloud Marketplace listings are coming soon. Teams that need a native Windows workstation should use 3D Map Explorer. Air-gapped is a first-class posture: customer-controlled hosting, API-key-gated access, secrets encrypted at rest, and every heavy external tool a capability-gated sidecar that degrades to a clear 503.

Full-stack web appOn-prem deployAWS · Azure · GCP soon3D Map Explorer for WindowsLoopback by defaultDPAPI / AES-GCM secretsDDIL-first

At a glance

  • Web appFull-stack browser application for GEOINT, fusion, C2 and force protection. No Windows installer, no portable ZIP
  • On-premStandard web-stack deploy on your servers or enclave — as easy as any modern on-prem application
  • Event tierDurable job registry (jobs survive restarts) · auto-index + STAC-register on every arriving collect · opt-in auto-detect · scenes (band-stack VRT → classify)
  • Ops consoleVanilla-JS dashboard at /dashboard/ — server health, live collects, job board with SSE, capability cards; no framework, no build step
  • SecurityBindAllInterfaces off by default; X-API-Key for non-loopback; DPAPI on Windows, AES-GCM key file on Linux
  • SidecarsSNAP, OpenCV, scikit-learn, YOLO-E, ODM, roofer, PDAL, Valhalla, MintPy, llama.cpp — all optional, all capability-reported
Air-gap is the default, not a feature flagUnlimited viewers of served endpoints per nodeJobs survive restartsSame core on the desk and in the rack

Capabilities

Three shapes and the serving stack under them

Full-stack web app

The full exploitation, fusion, C2 and force-protection tool set in the browser. No Windows download. Need a native Windows workstation? Use 3D Map Explorer.

  • No installer and no ZIP — this is a full-stack web application
  • Runs in a modern browser; Windows desktop users go to 3D Map Explorer
  • Offline basemap and AO caching for disconnected use

On-prem deploy

Deploy GeoTactical Insights on-prem as easily as a standard web stack: a collect arrives, the event tier auto-indexes it, STAC-registers it, optionally runs detection, and the job board streams progress — no operator at the keyboard.

  • docker run -p 5059:5059 -v 3dme-data:/data
  • On-prem web stack — no Windows installer; Windows desktop users run 3D Map Explorer
  • Generate the AES secret key once; no DPAPI needed on Linux

Cloud marketplace

Available soon on AWS, Azure and Google Cloud Marketplace. Until those listings land, on-prem is the supported path — same web app, your cloud or theirs.

  • GET /api/connect — every loaded source, per-protocol templates
  • OGC API Features · MVT · FeatureServer · VectorTileServer · SceneServer · ImageServer · 3D Tiles · XYZ · WMTS / TMS
  • Transactional Z-enabled GPKG FeatureServer for 3D editing

Terrain and game-engine serving

DEMs (GeoTIFF, DTED, SRTM .hgt, FLT, ASC) serve as quantized-mesh, heightmap PNG and LERC elevation; imagery as WMTS / TMS / XYZ — feeding Cesium for Unreal / Unity / Godot and the ArcGIS Maps SDKs inside simulation enclaves with no Cesium ion or AGOL.

  • /api/game/assets.json asset catalog
  • Camera sync SSE and entity telemetry WebSocket for multi-engine shared views

Databases without drivers

DuckDB attaches Postgres / PostGIS, MySQL, SQLite, SQL Server, BigQuery and Google Sheets read-only; tables with geometry or lat/long columns are auto-discovered and served as MVT, OGC API Features and a FeatureServer — no per-vendor ADO.NET drivers.

  • CQL2 filter parser; Advanced Query Builder UI
  • Connection profiles DPAPI-encrypted

Web dashboard and jobs

Every async job — stereo, footprints, roofer, ortho, scenes, auto-detect — persists to a SQLite-backed registry with an SSE event stream, so long-running exploitation is observable and restartable.

  • GET /api/jobs · /api/jobs/events
  • Auto-tier configured at runtime over REST, not config files

Fielding workflow

From deploy to a serving node

There is no Windows installer and no ZIP download. Stand up the web app on-prem, or wait for AWS / Azure / Google Cloud Marketplace. Need a Windows workstation? Use 3D Map Explorer. Nothing phones home.

  1. DeployStand up the web application on-prem. No Windows installer, no ZIP, no license server, no activation callout.
  2. LoadRegister local collects, GeoPackages, point clouds and charts — or let the watch folder and event tier ingest them as they arrive.
  3. ShareOpt into LAN binding, set the API key, and hand the /api/connect catalog to the team; ATAK, QGIS, ArcGIS Pro and browsers consume the same node.
  4. AutomateTurn on auto-index and auto-detect; group collects into scenes for band-stack classification on arrival.
  5. Operate disconnectedCache the AO, export offline packs, and keep working — DDIL is the primary mode, not a degraded one.

Specifications

Hosts, endpoints, security

Hosts

  • Web appFull-stack browser application — not a Windows download. Use 3D Map Explorer for a Windows workstation
  • Servernet10.0 console host — win-x64 or linux-x64
  • ContainerDocker on Linux; volume-mounted /data
  • MarketplaceComing soon on AWS, Azure and Google Cloud Marketplace
  • Port5059 default, env-overridable

Served protocols

  • VectorOGC API Features · OGC API Tiles / MVT · Esri FeatureServer · VectorTileServer
  • RasterEsri ImageServer · COG range · WMTS · TMS · XYZ
  • 3D / terrainSceneServer (I3S) · 3D Tiles · quantized-mesh · LERC · heightmap
  • LiveStreamServer WebSocket · SSE
  • CatalogSTAC API 1.0.0 · /api/connect

Security posture

  • BindingLoopback-only default; BindAllInterfaces is an explicit opt-in
  • AuthX-API-Key required for non-loopback clients
  • SecretsDPAPI (Windows) / AES-GCM key file (Linux); never plaintext
  • Crypto wordingFIPS-approved algorithms; 140-3 validation pending
  • TelemetryNone

Honest scope

What ships, what is optional, what is next

Defense buyers get burned by overclaims. This is the plain-language scope for this capability, drawn from the product’s own documentation.

  • Shipped Full-stack web app, on-prem deploy, event tier, dashboard, serving stack — GeoTactical Insights is a web application. Windows workstation delivery is 3D Map Explorer.
  • Optional sidecar / gated Every heavy tool is a sidecar — SNAP, ODM, roofer, PDAL, YOLO-E, scikit-learn, Valhalla, MintPy and llama.cpp are operator-installed; /capabilities reports what is present and every absent path 503s with an install hint.
  • Roadmap HTTPS hardening for exposed nodes — The server is designed for loopback / LAN enclaves. Put a reverse proxy with TLS in front of any node that leaves the enclave; built-in ACME automation is still being hardened.
  • Roadmap Hardened-container track — Iron Bank–style container hardening is on the roadmap; the standard Docker image ships today.

GeoTactical Insights · powered by 3D Map Explorer

See it on a disconnected machine.

A 30-minute guided demo on your own data: ingest, exploit, fuse, share to TAK and export — with the network cable out. We will also tell you exactly what is a sidecar, what is gated and what is still roadmap.

GeoTactical Insights

GEOINT and defense workflows powered by 3D Map Explorer, the air-gapped geospatial intelligence platform from Tech Maven Geospatial.

info@techmavengeospatial.com
3dmapexplorer.techmaven.net