Sovereign Networks

A national network the internet cannot see.

Project Hierophant provides states with non-IP national mesh infrastructure that operates without internet protocols, without global routing systems, and without the surveillance exposure built into every layer of the public internet.

Review the Architecture Request Briefing
SOVEREIGN MESH · NATIONAL TOPOLOGY · ACTIVE NODES 07/07 ONLINE · INTERNET DEPENDENCY: ZERO
000+090 +180+270+360 INTERNET BOUNDARY BGP HIJACK ATTEMPT · NULL DNS POISON ATTEMPT · NULL SOVEREIGN MESH · NON-IP SOVEREIGN MESH LOG IP ROUTING RECORDS : NIL DNS QUERIES : NIL INTERNET TRANSIT : 0
Our Position

Internet routing was designed to connect. Not to disappear.

Every state that relies on internet infrastructure for sovereign communications accepts a fundamental constraint: the internet was built to route around failure and record everything it routes. BGP tables map your infrastructure. DNS resolvers log your lookups. Traffic analysis at major exchange points is systematic. The architecture of the global internet is an architecture of visibility. A sovereign communications network built on internet protocols inherits all of that visibility by design. Hierophant provides an alternative — a non-IP mesh that has no BGP entries, no DNS records, no IP addresses, and no traffic that traverses the monitored exchange points of the global internet.

The Threat Model

Five threats every national network inherits from the internet.

These five vulnerabilities are structural properties of internet-dependent national communications — not implementation errors. They cannot be patched out of internet-protocol infrastructure.

01

BGP Hijacking & Route Manipulation

BGP · Route Injection · Traffic Diversion

Border Gateway Protocol was designed for reachability, not authentication. Any autonomous system can announce a more specific route and divert traffic intended for national infrastructure through foreign territory. BGP hijacks have redirected traffic from national government networks, financial institutions, and military organizations through adversary-controlled infrastructure for passive collection — often for hours before detection.

02

DNS Poisoning & Resolver Surveillance

DNS · Cache Poisoning · Query Logging

DNS resolvers log every query made from national infrastructure. A resolver operated by or accessible to a foreign intelligence service provides a complete map of which national systems are contacting which external resources, at what frequency, and in what operational pattern. DNS cache poisoning can redirect national users and systems to adversary-controlled infrastructure without any indication at the application layer.

03

Undersea Cable & Transit Interception

Cable Tap · Bulk Collection · Transit SIGINT

Internet traffic routed internationally transits undersea cables and internet exchange points where bulk passive collection programs operate. Traffic between national ministries, between domestic nodes, and between allied states is systematically collected at the physical layer regardless of encryption. National communications carried on internet infrastructure cannot avoid transiting infrastructure operated by or accessible to foreign intelligence services.

04

Quantum Harvest of National Traffic

HNDL · Quantum · Strategic Archive

National communications with strategic, diplomatic, or intelligence value are being archived today for retroactive quantum decryption. Adversaries with access to bulk collection infrastructure are systematically recording national internet traffic with a 10–30 year decryption horizon. Current encryption standards protect national communications only until quantum hardware arrives. The archive is being built now.

05

Cross-Border Data Sovereignty Violations

Jurisdiction · Cloud · Data Sovereignty

National communications infrastructure that routes through foreign cloud providers, CDNs, or exchange points crosses legal and jurisdictional boundaries that expose data to foreign legal demands, intelligence access, and regulatory obligations incompatible with national security. A state whose communications depend on infrastructure operated by foreign commercial entities has surrendered legal sovereignty over that data.

The Capability Stack

Eight layers. One sovereign backbone.

Hierophant sovereign networks is a full-stack alternative to internet-dependent national communications — from physical transport through protocol design to hardware manufacturing.

01

Non-IP State Protocol

A national communications protocol that operates without TCP/IP, DNS, or BGP. No IP addresses. No routing tables. No traffic that appears in internet exchange point monitors, BGP looking glasses, or DNS logs. The network is structurally invisible to internet surveillance infrastructure.

No TCP/IP · No BGP · No DNS · Non-IP
02

Post-Quantum National Encryption

NIST post-quantum cryptography throughout the national mesh. All inter-node traffic is quantum-safe by default. Protects archived traffic from retroactive quantum decryption on a 20–30 year horizon — the relevant sensitivity window for national security material.

NIST PQC · Forward Secrecy
03

LoRa & RF National Backbone

Long-range, low-power radio transport for the national mesh backbone — deployable in areas without fiber, operable without commercial infrastructure. Frequency-agile and resilient to jamming. The backbone operates when commercial cellular and internet infrastructure is disrupted.

LoRa · UHF · RF · Frequency-Agile
04

Sovereign LEO Integration

Integration with sovereign low-earth-orbit satellite constellations and national HAPS platforms for national mesh nodes that cannot be reached by terrestrial backbone. Transport-agnostic protocol operates identically over LEO, RF, or fiber — the sovereign protocol layer does not change with the physical transport.

LEO · HAPS · Transport-Agnostic
05

Non-IP Private Networks

The national mesh operates entirely on a non-IP protocol layer — invisible to every IP-layer network scanner, BGP monitor, and internet traffic analysis system operated by foreign intelligence services. No IP address is assigned. No route is announced. The network does not exist in the global internet address space.

No IP Addresses · No Routes · Invisible
06

Anonymous Node Identity

Mesh nodes do not emit persistent identifiers. Zero-knowledge protocol means that even a captured node cannot be linked to the national mesh topology, the ministry it serves, or the communications it has relayed. Node capture reveals nothing about the network.

ZK · No Node IDs · Anti-Forensic
07

Physical Layer Sovereignty

National mesh hardware is manufactured in Austria and the EU under sovereign supply chain oversight. No foreign silicon with unknown firmware. No commercial hardware with backdoored firmware update mechanisms. The hardware the national mesh runs on is fully auditable under national authority.

EU Manufacturing · Auditable · OS-Free
08

Air-Gapped Regional Mesh

Regional mesh segments can operate fully air-gapped — no connection to the wider national mesh or any external network — for facilities, command nodes, and secure zones requiring the highest isolation. Cryptographic synchronization occurs through physical media exchange without exposing the isolated segment.

Air-Gap · Regional Segment · No External Link
In Deployment

When internet independence matters.

Three scenarios where internet-dependent national communications failed and Hierophant sovereign mesh maintained national capability.

National Blackout Resilience

Internet exchange points go offline during a hybrid warfare infrastructure attack.

The Hierophant national mesh continues on RF and LoRa transport. Ministry communications, military C2, and emergency services coordination route through the sovereign backbone without touching the disrupted commercial internet. The infrastructure attack silences public connectivity; it does not touch sovereign command continuity.

Hybrid WarfareContinuityNo Internet Required
Cross-Border Sensitive Corridor

Two allied states require a secure inter-ministerial communications channel that neither can monitor.

Hierophant sovereign mesh segments in both states connect through a peer mesh link without transiting commercial internet infrastructure or third-country exchange points. Neither intelligence service can observe the channel. No BGP entry identifies the link. No DNS query logs the contact. The bilateral channel exists and neither partner has a record that can be collected.

BilateralNo Third PartyZero Record
Protected State Infrastructure Corridor

A nation deploys a sovereign communications layer for critical ministries independent of commercial infrastructure.

Ministry of Defense, Interior, Foreign Affairs, and Intelligence services operate on a dedicated sovereign mesh that does not share infrastructure with commercial internet service providers. Communications between ministries traverse the sovereign backbone. No ministry traffic appears in commercial network logs. The national communications architecture and its topology are unknown to any foreign monitoring service.

Ministry NetworkSovereign BackboneNo Commercial Infrastructure
By the Numbers

Sovereignty by design.

Four structural properties of a Hierophant sovereign network that hold regardless of the state of the global internet.

Zero
IP Addresses Assigned
No BGP · No DNS · Non-IP Protocol
Zero
Internet Hops Required
LoRa · RF · LEO · Fiber
PQ
All Traffic Quantum-Safe
Post-Quantum Signed
HW
Sovereign Hardware Supply Chain
Audited end-to-end · OS-Free
Continue

Adjacent capabilities.

Sovereign network infrastructure underpins all three of these mission-critical communication surfaces.

Sovereign Powers

Statecraft & Diplomacy ↗

Head-of-state channels and inter-ministerial networks that run on the sovereign mesh backbone — diplomatic communications that leave no intelligence record.
National Security

Critical Infrastructure ↗

SCADA command verification, IT/OT isolation, and NIS2-compliant control systems for power grids, water treatment, and energy networks — on the same non-IP backbone.
Mission Capability

Crisis & Continuity Ops ↗

Emergency command continuity when public infrastructure fails — the sovereign mesh that keeps national command structures operational during blackouts and hybrid operations.
Recognition

Trusted by those who cannot afford to be wrong.

Independent validation from the defence and security community — not awards for growth metrics, but recognition for solving a hard problem correctly.

Austrian Armed Forces · 2026
ADIC 2026 — Austrian Defence Innovation Conference
Project Hierophant presented at the Austrian Defence Innovation Conference 2026, the primary forum for defence technology assessment by the Austrian Armed Forces (Bundesheer) and allied ministries.
Austrian Armed Forces · bundesheer.at ↗
Press · Defence Media
Militär Aktuell — GetTrusted Cybersecurity Coverage
Militär Aktuell, Austria's leading defence and security publication, covered Project Hierophant's post-quantum sovereign communications approach and its relevance to national security architecture.
Read Coverage · militaeraktuell.at ↗
Hardware · hierophant.at
Austrian-Manufactured Secure Hardware
Purpose-built OS-free hardware manufactured in Austria under EU supply chain oversight. No operating system means no operating system vulnerability class. Hardened enclosures with physical access protection. National supply chain audit trail.
Hardware Catalog · hierophant.at ↗
GetTrusted Escrow GmbH · Vienna, Austria

A network the internet cannot see.

Request a Briefing Hardware Catalog