Government & Defense — Alpha Quantum | Air-Gapped Domain Intelligence, FOIA Compliance & Network Security

The Challenge

Government networks face threats that commercial tools were not built for

Classified environments cannot call external APIs. FOIA requests demand automated redaction at scale. Shadow AI adoption in agencies creates data-loss vectors. Autonomous agents browsing .gov infrastructure need enforceable guardrails. Each of these requirements demands purpose-built infrastructure.

Air-gapped networks need offline intelligence

Classified and sensitive government networks operate without internet access by design. Cloud-based threat intelligence and content-filtering APIs are architecturally incompatible with these environments. The URL Categorization Database ships as a perpetual-license downloadable file in CSV, JSON or SQLite format, deployable inside SCIF environments, sovereign data centers and isolated OT networks without any external connectivity requirement.

FOIA redaction is manual and error-prone

Freedom of Information Act requests require agencies to review thousands of documents for personally identifiable information before public release. Manual redaction is slow, inconsistent and risks exposing protected data. Staff attorneys spend weeks on what automated PII detection handles in hours. The Anonymization API detects 70+ PII types across text, PDF, DOCX and image formats with 99.9% accuracy, providing first-pass redaction that legal teams review and approve.

Shadow AI adoption in government agencies

Government employees use AI writing assistants, code generators and research tools without IT approval, creating unmonitored data-loss vectors. Sensitive policy documents, internal communications and pre-decisional materials enter commercial AI systems without audit trails. The AI Tools Blocklist classifies 20,361+ AI-tool domains across 18 categories, enabling agencies to enforce granular allow/block policies at the network gateway level with daily-updated feed files.

Autonomous agents on .gov networks

Government agencies deploying AI agents for procurement research, vendor evaluation and compliance monitoring need enforceable controls over where those agents navigate. Without page-type classification, an agent performing vendor research could reach login pages, checkout flows or credential-harvesting sites. The AI Agent Allowlist maps 28 page types across 40M+ domains, enabling policy engines to restrict agent navigation to approved page types on approved hosts.

Filtering Taxonomy

58 web-filtering categories built for government policy enforcement

The web-filtering taxonomy classifies domains into categories designed for block/allow decisions rather than advertising context. Each category maps directly to government acceptable-use policies, CISA binding operational directives, NIST cybersecurity framework controls, MITRE ATT&CK techniques and agency-level network security requirements.

CategoryThreat LevelPolicy ActionComplianceCoverage

MalwareCRITICALBlock + Alert SOCCISA BOD 22-01120M

PhishingCRITICALBlock + Alert SOCNIST 800-53120M

Command & ControlCRITICALBlock + Isolate HostMITRE ATT&CK120M

SpywareHIGHBlock + LogCISA Advisories120M

Proxy / AnonymizerHIGHBlock + LogAgency AUP120M

HackingHIGHBlockNIST CSF120M

ExtremismHIGHBlock + ReportDHS Directives120M

Adult ContentMEDIUMBlockAgency AUP120M

GamblingMEDIUMBlockAgency AUP120M

WeaponsMEDIUMBlock or LogAgency Policy120M

DrugsMEDIUMBlockAgency AUP120M

CryptocurrencyMEDIUMLog + ReviewFinCEN / Treasury120M

Social MediaLOWMonitor or LimitOMB M-10-06120M

Streaming MediaLOWBandwidth LimitNetwork Mgmt120M

File SharingMEDIUMBlock or DLPData Loss Prev.120M

Web-Based EmailLOWAllow Official OnlyRecords Mgmt120M

Full 58-category taxonomy available in the URL Categorization Database. All categories mapped to standard government compliance frameworks.

Air-gapped policy enforcement flow

Network RequestAir-Gapped DB Lookup · Local SQLite / CSV

Category MatchPolicy Engine · Category-to-Action Mapping

Threat DetectedBlock · Alert SOC · Isolate Host · Log

Clean TrafficAllow · Log · Bandwidth Policy Applied

Government Tiers

Solutions across every level of government

Federal agencies, state and local governments, and defense organizations each operate under different compliance frameworks, network architectures and procurement constraints. The same underlying database and classification engine adapts to each deployment model, from cloud-connected civilian networks to fully isolated classified enclaves.

Federal / National

State & Local

Defense & Intelligence

CISA Compliance

Map the 58 web-filtering categories to CISA Binding Operational Directives. Automate compliance reporting by logging every block and allow decision against the directive that mandates it. The database provides the classification layer that CDM dashboards and EINSTEIN sensors cannot generate independently.

FedRAMP Considerations

The offline database deployment model avoids cloud authorization requirements entirely. No data leaves the agency network. For hybrid deployments, the real-time API operates from infrastructure that supports standard federal procurement vehicles. Classification data stays within the agency boundary at all times.

.gov Network Filtering

Federal civilian agencies enforce acceptable-use policies across hundreds of thousands of endpoints. The 120M-domain database provides instant local lookup for web gateways, DNS resolvers and next-generation firewalls. Seven-day refresh cycles delivered as differential updates keep the offline corpus current without full re-downloads.

School District Filtering

K-12 networks must comply with the Children's Internet Protection Act. The AI Tools Blocklist adds a dedicated AI-tool filtering layer on top of standard web filtering, blocking essay writers, paraphrasing tools and AI tutoring platforms that threaten academic integrity. EDL and RPZ formats integrate directly with Palo Alto, Fortinet and BIND DNS infrastructure already deployed in most districts.

Municipal Network Security

City and county governments operate networks serving police departments, courts, public works and administrative offices. The URL Database provides content filtering and threat intelligence in a single offline file. Municipal IT teams deploy it without cloud dependencies, SaaS contracts or per-seat licensing models that strain limited budgets.

Public Library Content Controls

Public libraries balance open access with legal obligations under CIPA. The web-filtering taxonomy distinguishes between categories that must be blocked on children's terminals and categories that remain accessible on adult terminals. Granular category-level policy enforcement replaces the blunt on/off filtering that triggers patron complaints.

Classified Network Deployment

SIPRNet, JWICS and other classified enclaves require all data sources to be physically imported and validated before deployment. The URL Categorization Database ships as a standalone file with no external dependencies, no phone-home telemetry and no license-server requirement. Perpetual licensing means the database continues to function even if the vendor relationship ends.

ITAR and Export Control

Defense contractors and cleared facilities handling International Traffic in Arms Regulations data need domain intelligence that does not transit foreign infrastructure. The offline database can be validated, signed and deployed within ITAR-compliant workflows. No classification queries leave the facility. No API calls cross national boundaries.

Threat Intelligence Feeds

The database's malware, phishing, command-and-control and spyware categories function as a threat intelligence layer for defense networks. Integrate the offline feed into SIEM platforms, DNS sinkholes and network monitoring tools. Each domain carries a web-filtering classification that maps to MITRE ATT&CK techniques and CISA alert categories.

Capabilities

Six capabilities purpose-built for government deployment

Each capability addresses a specific requirement that commercial web-filtering products do not solve. From air-gapped database deployments for classified enclaves to automated FOIA redaction and shadow AI governance, these tools integrate into existing government network infrastructure, security stacks and compliance workflows without requiring architectural changes or new vendor dependencies.

Air-Gapped Deployment

The 120M-domain database ships as CSV, JSON or SQLite with a perpetual license. No internet connection, license server or API endpoint required. Deploy inside SCIF environments, sovereign data centers and classified enclaves. Seven-day differential updates delivered as secure file transfers when connectivity is available.

URL Database

FOIA Redaction

Automated first-pass redaction of personally identifiable information across text, PDF, DOCX, images and scanned documents. The Anonymization API detects 70+ PII types including names, Social Security numbers, addresses, phone numbers and financial account identifiers. Legal reviewers approve the automated redactions instead of performing them manually.

Anonymization API

Shadow AI Governance

20,361+ AI-tool domains classified into 18 categories with daily updates. Four risk flags per domain: trains on user data, data sovereignty concerns, NSFW or adult AI content, and deepfake or abusive content generation. Delivered as EDL for Palo Alto and Fortinet firewalls, DNS RPZ for BIND, PAC files for group policy deployment and REST API for programmatic access.

AI Tools Blocklist

Agent Policy Enforcement

Control where autonomous AI agents navigate across 40M+ domains. 28 page types per domain: login, signup, checkout, documentation, pricing, contact, careers and more. Four-layer policy enforcement from host lists through egress rules to default-deny posture. Prevent agents from reaching credential pages, making purchases or accessing restricted content.

AI Agent Allowlist

Threat Intelligence

The web-filtering taxonomy identifies malware distribution sites, phishing pages, command-and-control infrastructure, spyware delivery domains and exploit kit landing pages. Each classification integrates with SIEM platforms as a threat intelligence feed. Coverage extends across 120M domains with seven-day refresh cycles catching newly registered malicious infrastructure.

Dual Taxonomy Classification

Every domain carries both IAB Content Taxonomy classification (700+ advertising and content categories) and web-filtering classification (58 security and policy categories). The IAB taxonomy powers content intelligence and audience analysis. The web-filtering taxonomy drives block/allow decisions. Both are available simultaneously in the offline database and the real-time API.

Classification API

Use Cases

How government organizations deploy domain intelligence

From network perimeter defense to public records compliance, the same classification infrastructure serves different government missions depending on the deployment model, compliance framework and operational security requirements of each agency or command.

01

Network Content Filtering

Deploy the 120M-domain database as the classification layer behind web gateways, DNS resolvers and next-generation firewalls. 58 web-filtering categories map directly to government acceptable-use policies. Local lookup eliminates API latency and external data dependencies for classified and sensitive networks. Policy enforcement at line speed across all endpoints without any query leaving the network perimeter.

02

FOIA Compliance Automation

Process Freedom of Information Act requests at scale with automated PII detection and redaction. The Anonymization API handles text documents, PDFs, scanned images and spreadsheets in a single workflow. Staff attorneys review automated redactions instead of performing manual page-by-page review, reducing processing time from weeks to days while improving consistency across large document sets.

03

Threat Intelligence Integration

Feed domain classification data into SIEM platforms, security orchestration tools and network monitoring systems. Malware, phishing, command-and-control and spyware categories provide a continuously updated threat intelligence layer that enriches existing indicator-of-compromise databases. The offline format integrates with air-gapped security operations centers that cannot query external threat feeds in real time, enabling proactive threat detection and incident response across isolated environments.

04

Employee Web Usage Policy

Enforce acceptable-use policies across government workstations, VDI instances and mobile devices issued to federal and state employees. Social media monitoring during work hours, bandwidth limits on streaming services, blocks on gambling and adult content, and logging of cryptocurrency site access. Category-level granularity replaces blanket internet restrictions that reduce productivity and drive employees to personal devices and unauthorized VPN circumvention tools.

05

Classified Network Security

Deploy domain intelligence inside SIPRNet, JWICS and other classified enclaves where no external data source can be queried in real time. The perpetual-license database operates independently of vendor infrastructure without license-server callbacks or cloud-based validation. Differential updates are imported through standard cross-domain solutions and data diode architectures when available. No telemetry, no license validation calls, no external dependencies of any kind.

06

Public Records Anonymization

Anonymize public records, court filings, police reports, government correspondence and investigative files before publication, archival or inter-agency sharing. The Anonymization API detects names, Social Security numbers, dates of birth, financial accounts, medical record numbers and dozens of additional PII types across text, PDF, DOCX and scanned image formats. Format-preserving pseudonymization maintains document readability and cross-reference integrity while replacing every protected identifier with a consistent pseudonym.

Scale

Government-grade intelligence infrastructure

19 years of continuous operation serving government organizations worldwide. Deployed across federal civilian agencies, state and local governments, defense contractors, intelligence community partners and allied nation networks.

120M+

Domains Classified

58

Filtering Categories

17M+

Company-Linked Domains

20,361+

AI Tools Classified

40M+

Agent-Ready Domains

7 days

Database Refresh Cycle

Perpetual

License Model

300+

Organizations Since 2007

Platforms

Five platforms serving government and defense

The URL Categorization Database provides the offline classification layer for air-gapped and classified networks. Companion platforms add real-time domain classification, AI-tool governance for shadow AI prevention, agent navigation guardrails for autonomous systems, and automated data anonymization for FOIA and records management workflows.

URL Categorization Database Website Categorization API AI Tools Blocklist AI Agent Allowlist Anonymization API

Domain intelligence for government networks and national security

URL Categorization Database