Deployment
A full-stack web app. On-prem today. Marketplace soon.
GeoTactical Insights is a full-stack web application — not a Windows download and not a ZIP. Deploy it on-prem as easily as any modern web stack; AWS, Azure and Google Cloud Marketplace listings are coming soon. Teams that need a native Windows workstation should use 3D Map Explorer. Air-gapped is a first-class posture: customer-controlled hosting, API-key-gated access, secrets encrypted at rest, and every heavy external tool a capability-gated sidecar that degrades to a clear 503.
Full-stack web appOn-prem deployAWS · Azure · GCP soon3D Map Explorer for WindowsLoopback by defaultDPAPI / AES-GCM secretsDDIL-first
At a glance
- Web appFull-stack browser application for GEOINT, fusion, C2 and force protection. No Windows installer, no portable ZIP
- On-premStandard web-stack deploy on your servers or enclave — as easy as any modern on-prem application
- Event tierDurable job registry (jobs survive restarts) · auto-index + STAC-register on every arriving collect · opt-in auto-detect · scenes (band-stack VRT → classify)
- Ops consoleVanilla-JS dashboard at /dashboard/ — server health, live collects, job board with SSE, capability cards; no framework, no build step
- SecurityBindAllInterfaces off by default; X-API-Key for non-loopback; DPAPI on Windows, AES-GCM key file on Linux
- SidecarsSNAP, OpenCV, scikit-learn, YOLO-E, ODM, roofer, PDAL, Valhalla, MintPy, llama.cpp — all optional, all capability-reported
Capabilities
Three shapes and the serving stack under them
Full-stack web app
The full exploitation, fusion, C2 and force-protection tool set in the browser. No Windows download. Need a native Windows workstation? Use 3D Map Explorer.
- No installer and no ZIP — this is a full-stack web application
- Runs in a modern browser; Windows desktop users go to 3D Map Explorer
- Offline basemap and AO caching for disconnected use
On-prem deploy
Deploy GeoTactical Insights on-prem as easily as a standard web stack: a collect arrives, the event tier auto-indexes it, STAC-registers it, optionally runs detection, and the job board streams progress — no operator at the keyboard.
docker run -p 5059:5059 -v 3dme-data:/data- On-prem web stack — no Windows installer; Windows desktop users run 3D Map Explorer
- Generate the AES secret key once; no DPAPI needed on Linux
Cloud marketplace
Available soon on AWS, Azure and Google Cloud Marketplace. Until those listings land, on-prem is the supported path — same web app, your cloud or theirs.
GET /api/connect— every loaded source, per-protocol templates- OGC API Features · MVT · FeatureServer · VectorTileServer · SceneServer · ImageServer · 3D Tiles · XYZ · WMTS / TMS
- Transactional Z-enabled GPKG FeatureServer for 3D editing
Terrain and game-engine serving
DEMs (GeoTIFF, DTED, SRTM .hgt, FLT, ASC) serve as quantized-mesh, heightmap PNG and LERC elevation; imagery as WMTS / TMS / XYZ — feeding Cesium for Unreal / Unity / Godot and the ArcGIS Maps SDKs inside simulation enclaves with no Cesium ion or AGOL.
/api/game/assets.jsonasset catalog- Camera sync SSE and entity telemetry WebSocket for multi-engine shared views
Databases without drivers
DuckDB attaches Postgres / PostGIS, MySQL, SQLite, SQL Server, BigQuery and Google Sheets read-only; tables with geometry or lat/long columns are auto-discovered and served as MVT, OGC API Features and a FeatureServer — no per-vendor ADO.NET drivers.
- CQL2 filter parser; Advanced Query Builder UI
- Connection profiles DPAPI-encrypted
Web dashboard and jobs
Every async job — stereo, footprints, roofer, ortho, scenes, auto-detect — persists to a SQLite-backed registry with an SSE event stream, so long-running exploitation is observable and restartable.
GET /api/jobs·/api/jobs/events- Auto-tier configured at runtime over REST, not config files
Fielding workflow
From deploy to a serving node
There is no Windows installer and no ZIP download. Stand up the web app on-prem, or wait for AWS / Azure / Google Cloud Marketplace. Need a Windows workstation? Use 3D Map Explorer. Nothing phones home.
- DeployStand up the web application on-prem. No Windows installer, no ZIP, no license server, no activation callout.
- LoadRegister local collects, GeoPackages, point clouds and charts — or let the watch folder and event tier ingest them as they arrive.
- ShareOpt into LAN binding, set the API key, and hand the /api/connect catalog to the team; ATAK, QGIS, ArcGIS Pro and browsers consume the same node.
- AutomateTurn on auto-index and auto-detect; group collects into scenes for band-stack classification on arrival.
- Operate disconnectedCache the AO, export offline packs, and keep working — DDIL is the primary mode, not a degraded one.
Specifications
Hosts, endpoints, security
Hosts
- Web appFull-stack browser application — not a Windows download. Use 3D Map Explorer for a Windows workstation
- Servernet10.0 console host — win-x64 or linux-x64
- ContainerDocker on Linux; volume-mounted /data
- MarketplaceComing soon on AWS, Azure and Google Cloud Marketplace
- Port5059 default, env-overridable
Served protocols
- VectorOGC API Features · OGC API Tiles / MVT · Esri FeatureServer · VectorTileServer
- RasterEsri ImageServer · COG range · WMTS · TMS · XYZ
- 3D / terrainSceneServer (I3S) · 3D Tiles · quantized-mesh · LERC · heightmap
- LiveStreamServer WebSocket · SSE
- CatalogSTAC API 1.0.0 · /api/connect
Security posture
- BindingLoopback-only default; BindAllInterfaces is an explicit opt-in
- AuthX-API-Key required for non-loopback clients
- SecretsDPAPI (Windows) / AES-GCM key file (Linux); never plaintext
- Crypto wordingFIPS-approved algorithms; 140-3 validation pending
- TelemetryNone
Honest scope
What ships, what is optional, what is next
Defense buyers get burned by overclaims. This is the plain-language scope for this capability, drawn from the product’s own documentation.
- Shipped Full-stack web app, on-prem deploy, event tier, dashboard, serving stack — GeoTactical Insights is a web application. Windows workstation delivery is 3D Map Explorer.
- Optional sidecar / gated Every heavy tool is a sidecar — SNAP, ODM, roofer, PDAL, YOLO-E, scikit-learn, Valhalla, MintPy and llama.cpp are operator-installed; /capabilities reports what is present and every absent path 503s with an install hint.
- Roadmap HTTPS hardening for exposed nodes — The server is designed for loopback / LAN enclaves. Put a reverse proxy with TLS in front of any node that leaves the enclave; built-in ACME automation is still being hardened.
- Roadmap Hardened-container track — Iron Bank–style container hardening is on the roadmap; the standard Docker image ships today.
GeoTactical Insights · powered by 3D Map Explorer
See it on a disconnected machine.
A 30-minute guided demo on your own data: ingest, exploit, fuse, share to TAK and export — with the network cable out. We will also tell you exactly what is a sidecar, what is gated and what is still roadmap.
GeoTactical Insights
GEOINT and defense workflows powered by 3D Map Explorer, the air-gapped geospatial intelligence platform from Tech Maven Geospatial.