
Consent-Gated Household LAN Discovery
Passive metadata collection across DHCP, mDNS and Matter with strict privacy filtering rejecting all camera RTSP streams and audio.
Privacy-first household device inventory, UK PSTI / ETSI EN 303 645 checks and family-safe alerts. (कस्टम वॉल्यूम, समर्पित डेटा रेजीडेंसी, SSO/SCIM और पार्टनर मल्टी-टेनेंट प्रबंधन।)

Requires verified household ownership and privacy notice acceptance before any passive LAN discovery runs.
Observes DHCP, ARP, mDNS, SSDP and Matter/Thread metadata via optional Linux/OpenWrt gateway or authorised router API.
Matches vendor, model and firmware EOL lifecycle with explicit confidence scores (0.0–1.0).
Unrecognised devices are strictly labelled 'unknown' rather than giving false assurances of security.
Strictly rejects camera RTSP video streams, microphone audio, smart lock PIN codes and plaintext Wi-Fi passwords.
Optional home gateway buffers metadata locally if cloud connectivity drops and verifies Ed25519-signed firmware updates.

Passive metadata collection across DHCP, mDNS and Matter with strict privacy filtering rejecting all camera RTSP streams and audio.

Transparent posture classification where unsupported devices are labelled 'unknown' instead of giving false security.
CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001, T1098.003, T1048, T1190) with idempotent dedupe_key ingestion and SHA-256 immutable event hashes.[REDACTED_SECRET], [REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking.ENABLE / FORCE ROW LEVEL SECURITY across all 20 tenant tables bound to transaction-local current_tenant_id(); cross-tenant queries fail closed with HTTP 403.isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail.DNS TXT or HTTP ownership token required before scanning. Continuous evidence aligned with CERT-In Directions, Digital Personal Data Protection (DPDP) Act 2023, RBI Cybersecurity Framework.ML-KEM / ML-DSA), and 2035 full PQC completion.FORCE ROW LEVEL SECURITY on all 20 tenant tables.ALTER TABLE security_events ENABLE ROW LEVEL SECURITY; ALTER TABLE security_events FORCE ROW LEVEL SECURITY; CREATE POLICY tenant_isolation_policy ON security_events FOR ALL TO csh_app_role USING (organization_id = current_tenant_id()) WITH CHECK (organization_id = current_tenant_id());
नहीं। पहचान डिटरमिनिस्टिक नियमों से होती है और प्रत्येक रोकथाम कार्रवाई के लिए मानव अनुमोदन आवश्यक है।
आप ऑनबोर्डिंग के समय UK (लंदन) या EU (फ्रैंकफर्ट) डेटा रेजीडेंसी चुन सकते हैं।
हाँ, CSH Compliance तकनीकी साक्ष्यों को ISO/IEC 27001, CERT-In और DPDP नियंत्रणों से जोड़ता है।
केवल वे संपत्तियां जिनका स्वामित्व DNS TXT या HTTP टोकन से सत्यापित हो।
हाँ, पार्टनर संस्करण डेलिगेटेड टेनेंट्स और साझा लाइसेंसिंग का समर्थन करता है।

एक सुरक्षा इंजीनियर के साथ 30 मिनट। कोई स्लाइड नहीं।