setecastronomyinc.com

What It Is

SATIS by Setec Astronomy, Inc. is a cybersecurity platform designed for real-time threat mitigation. It publishes data such as malicious IPs, brute-force attempts, port scans, and external threat feeds to a permissioned blockchain, then automatically enforces nftables rules on participating nodes or applies network-layer blackhole routing via BGP RTBH. Its core value proposition is “when one node detects a threat, all nodes can quickly block it,” with the documentation claiming end-to-end enforcement can be completed within 30 seconds.

Core Capabilities and Architecture

In terms of protection coverage, SATIS supports threat intelligence distribution, host/edge firewall blocking, BGP blackhole routing, and email-threat capabilities such as email address blacklists, DNS RPZ, and message hash fingerprints. Its deployment model is fairly engineering-oriented: nodes are interconnected with WireGuard encryption, the blockchain P2P layer runs over IPv6, the enforcement layer uses nftables and BIRD 2, and the API layer is built on FastAPI. It also supports fail2ban, AbuseIPDB, and manual API submissions. On the management side, it provides a real-time dashboard, chain status, node heartbeats, statistics APIs, SSE event streams, and PDF threat reports, making it easier to integrate with SIEM or automation platforms.

Pricing and Compliance

The pricing information is relatively clear: Community is free but limited to 100 API calls per day with a 15-minute delay; Professional is $299/month and includes real-time API access, SSE, 1 WireGuard tunnel, and 1 BGP RTBH session; Enterprise is $999/month and includes unlimited API usage, multiple tunnels, multiple BGP sessions, custom threat feeds, a 99.9% SLA, and priority support. On compliance, the material says its reporting aligns with NIST CSF 2.0, CISA BOD 22-01, FIPS 140-2, SOC 2, and GDPR. However, it does not explicitly state that the service has obtained formal SOC 2, FIPS, or similar certifications, so this should be understood as “compliance reporting support/framework alignment” rather than certified compliance.

Pros and Cons

Its strengths are an open technical stack built on mature components such as nftables, BIRD 2, and WireGuard, which reduces vendor lock-in; developer-friendly APIs, SSE, and OpenAPI documentation; and BGP RTBH capability, which is valuable for edge-network protection. The limitations are that deployment and operations are not trivial: users need to understand BGP, WireGuard, Linux firewalls, and threat intelligence workflows. The free tier is quite limited, and the main documentation does not provide payment methods, customer references, company location, or actual service coverage.

Who It’s For and Access from China

SATIS is better suited to security teams with network engineering capabilities, MSSPs, managed service providers, or enterprises with multi-node infrastructure that need fast synchronized blocking and automated response. Ordinary SMBs that only need a managed WAF or DDoS protection may find it overly complex. The material does not state how accessible it is from China, and network connectivity, payment options, and compliance procurement feasibility are all unknown. Depending on requirements, alternatives worth comparing include Cloudflare Magic Transit, Akamai Prolexic, Radware, MISP, AbuseIPDB, and GreyNoise.