Use Cases

IronCore and CobaltCore provide bare-metal and IaaS (Infrastructure as a Service) infrastructure managed through Kubernetes-native APIs, deployed within agency-controlled facilities or on EU-sovereign data centre capacity. Each security domain runs as an isolated Gardener-managed cluster with its own key hierarchy. OpenKCM manages cryptographic key lifecycle across security domains using the HYOK (Hold Your Own Key) model: key material never leaves the domain it was created for, and the infrastructure operator cannot access data without the key holder’s explicit authorisation. Konfidence provides immutable, versioned deployment packages that ensure the same signed artifact is deployed identically across every security tier, eliminating configuration drift as a source of migration risk and giving both agency and supplier a reproducible, tamper-evident deployment record. The same cluster management plane can extend to disconnected edge locations, with Gardener handling lifecycle management across connected and isolated environments through the same operational interface.

OCM (Open Component Model) provides the software supply chain layer that the Cyber Resilience Act requires and that defense procurement has needed for longer. Every component, from firmware to application container, is packaged as a signed OCM artifact, with build environment, dependency graph, and infrastructure snapshot captured at build time. The signed component descriptor travels with the component through every environment and every security tier, giving both the procuring agency and the supplying contractor a shared, tamper-evident software bill of delivery. When a vulnerability is discovered, the artifact graph shows exactly which deployed environments are affected without manual inventory work.

Greenhouse aggregates compliance posture across all clusters: NIS2 supply chain security status, CRA (Cyber Resilience Act) artifact provenance, EUCS High control evidence, and policy violation monitoring through its DOOP (Decentralised Observer of Policy Violations) plugin. NIS2’s 24-hour incident reporting obligation becomes a continuous operational output of the monitoring infrastructure rather than a fire-drill. For dual-use AI systems, such as logistics optimisation, predictive maintenance, and decision-support tools, Greenhouse’s observability layer provides the operational audit log that the EU AI Act’s Article 12 requires, without additional instrumentation.

ORD (Open Resource Discovery) lets each participating agency or contractor describe its available data services as machine-readable metadata, enabling discovery across multi-party defense programs without bespoke bilateral integrations.