Open Source. Agentic. Transparent.
Tholian® Core is the shared type system of the Tholian Network. It gives every agent, service, and integration exactly one canonical representation for networks, hosts, vulnerabilities, incidents, mitigations, and the evidence that connects them.
This is not another dashboard schema. It is the contract that lets autonomous cyber defense operate without reinterpreting the same data in every tool.
Every value marshals to a documented JSON form. The same data is readable by Tholian agents, Elastic, Kibana, SIEM , SOAR , and custom dashboards without translation layers that drift over time.
Agentic defense only works when agents can trust each other's data. Core provides the vocabulary for that trust. Every address, subnet, socket, vulnerability, incident, and response has exactly one definition.
Every Tholian component is written like an agent. It observes, reports, and accepts remote commands through explicit contracts. Core makes that behavior portable across the entire network, so observations can be correlated, mitigations can be propagated, and decisions can be coordinated without central guesswork.
Tholian is the only Agentic Cyber Defense solution that is built Open Source and remains transparent about what it can do. Core is the foundation of that promise. The types are public, the wire format is documented, and the reference implementation is available for inspection.
We do not hide capabilities behind proprietary terminology. We publish the model, we document the contracts, and we let the code speak for itself.
Inspect the type system, the schemas, and the reference implementations directly.