Adaptive Deterrence for Critical Infrastructure & Mining

If it can be learned,
it will be exploited.

See how learnable your operation is
How do we deny an adversary
the opportunity to succeed?
This is what the adversary experiences.
Move the cursor. Try to reach the target.
Move toward the target.
The system is watching you learn.
move your cursor toward the target
Failed
The system learned you before you reached it.
Target
Does your operation give an adversary the same advantage?

How predictable is your current security operation?

97%
Opportunity Denied Rate
peak 97% · sustained months 12–20
52 → 3
Monthly adversary contacts
six months into deployment
0
Successful extractions
across 19 months
19 mo
Continuous live deployment
South Africa
SACAA UASOC G1424D  ·  Licensed BVLOS operator  ·  Night & remote operations  ·  Operational since 2020  ·  Mining & critical infrastructure

Every successful breach begins long before the incident.

By the time your system detects a threat, the plan is already complete.

Every day your operation runs consistently, it runs for them.

01
Observation.
Before anything moves, there is a watching phase. Patrol intervals are timed. Shift transitions are mapped. Response lag is measured. Weeks of intelligence gathering before a single act. The adversary doesn't guess — they study.
02
Pattern recognition.
After 30 days of observation, a determined adversary has a working model of your system. Not a hypothesis — a schedule. Which drone covers which corridor. When response pulls resources away. What the gaps look like and when they open.
03
Confidence building.
As you read this, a patient adversary is somewhere between day 14 and day 30 of mapping an operation like yours. They are not waiting for an opportunity — they are building one. Your incident log records what happens next. It records nothing about the 30 days that made it inevitable.
When it goes wrong, the question won't be why didn't you stop it.
It'll be why didn't you know.
We stop the plan before it completes.

The adversary does not defeat the technology.
They find the gap between them.

By week four, the adversary has built a network — probe units, intel nodes, adaptive cells, each feeding a central model of your operation. This is not a crew. It is an operation.

Hardware scales activity. Only adaptation scales deterrence.
The hardware illusion
Which hardware?
What coverage?
These are the wrong questions.
Every system you can deploy can be studied.
Capability without variance is a training dataset.
The adaptive reality
Syndicates observe,
probe, and adapt.
Execution follows confidence.
The adversary doesn't need to defeat your hardware.
They need to predict it.

Zerathis Blindspot™ fuses every sensing layer into one intelligence picture — revealing patterns no single sensor can see.

The hardware is an input to the intelligence system — not the intelligence system itself.

Aerial
Thermal · EO · Mobile surveillance
Ground & IoT
Presence · Perimeter · Access · Environmental sensors
Operational
Incidents · Response · Patrols · Historical activity
Zerathis Blindspot™
Measure → Disrupt → Adapt

Prevention.
Not response.
The adversary cannot execute a plan they cannot complete.

We prevent adversaries from forming a viable plan in the first place.
Zerathis Blindspot™ works in three moves — spot when your operation is becoming predictable, break the pattern before it can be used, and stay ahead of how the adversary adapts.
Measure
Pattern Entropy Protocol
Continuously tracks how legible your operation is becoming to an outside observer. When your patterns risk becoming predictable enough to exploit, the system flags the exposure and acts before the adversary's picture is complete. The result: their observation window closes before it produces anything they can use.
Layer 01
Disrupt
Signature Displacement Layer
Keeps the picture the adversary is building from ever becoming reliable. Rather than trying to eliminate patterns — which is impossible — it ensures that whatever they think they've learned stops holding true, sending them back to the start every time they approach confidence. Every failed model costs them time, resources, and momentum — and the window they were planning against.
Layer 02
Adapt
Adversary Behaviour Intelligence
Maintains a continuous read on where the adversary is in their planning cycle, and adjusts accordingly. This is the layer that makes the system adaptive rather than reactive: when they shift their approach, the platform has already moved. They adapt into a system that anticipated the adaptation.
Layer 03
Architecture not publicly disclosed.  ·  Available to qualified operators under NDA.
Zerathis Blindspot™ — Full platform overview →
Strategic deployment partner  ·  Platinum mining, South Africa
Active deployment
Opportunity Denied Rate — one site, nineteen months
Baseline
Month 01
78%
Month 06
97%
19-month proof window
97%
Opportunity Denied Rate — sustained, months 12–20
0
Successful extractions — across 19 months of continuous adversarial pressure
14 days
Adversary re-modelling window — broken before completion, every cycle
The adversary

A large, well-resourced crew operating around the clock, with insider access through the operational hierarchy and industrial extraction equipment. The most severe threat classification in our framework — an adversary that does not walk away when deterred. It adapts.

What changed
Months 01–02
Deployment phase. Sustained adversary contact — every attempt detected and denied. They were active and probing under full pressure. Zero successful extractions from day one.
Months 03–08
Pattern variation begins. Probe frequency falls sharply as the adversary cannot reconcile the shifting pattern with the model they had built. Incident frequency collapses.
Months 09–16
Eight consecutive months, every attempted extraction denied — not zero adversary presence, but zero successful extractions. Adversary activity reached its peak in this period, with large volumes of pre-staged material and criminal logistics intercepted. Every attempt denied. The operation was present, was detected, and could not predict where the drone would be. ODR: sustained at 97%.
Months 17–19
Adversary returns with a modified approach. Escalation to large-group operations and cross-boundary coordination with adjacent illegal mining. The platform had flagged behavioural drift in the preceding 28 days — method shift, timing shift, group size escalation. Emergency variance directive issued. Every operation denied.

Across the deployment, individual operations ran to 100+ suspects and industrial-scale extraction attempts — each detected, each denied.

Read the full deployment breakdown →
The adaptation dynamic
Variable
Range observed
Outcome
Group size
1 individual to 30+ coordinated suspects
DENIED
Timing
Operations across all hours — demonstrated timing shifts across deployment
DENIED
Method
Opportunistic theft → pre-staged underground operations
DENIED
Coordination
Cross-boundary operations with adjacent illegal mining syndicates
DENIED
Persistence
Returned after periods with no successful extraction, using a modified approach. Never stopped adapting.
DENIED

Delivered through Zerathis Blindspot™ — our adaptive deterrence intelligence system. Across nineteen months of continuous adversarial pressure, the Opportunity Denied Rate reached and sustained 97% — meaning 97 of every 100 adversarial attempts were neutralised at the planning stage, before they became incidents.

Zero successful extractions. That is the number that matters.

Under confidentiality agreement.  ·  Sector and location disclosed to qualified operators on request.
Commission a Blindspot Audit →
We kept watching the same breach.
Different asset. Different province.
Same planning model.

It started in rail. National freight corridor, South Africa. Coordinated syndicates — cutters, carriers, processors — taking down a span in under 10 minutes. Decoy attacks to pull our response before hitting the real target. They watched conditions. They used rain. They had a plan before we did.

Once we understood how they operated, we built the system we wished we'd had. That system is Zerathis Blindspot™.

We were preventing it but counting it wrong —
incidents instead of opportunity denied.
Origin: freight rail · South Africa  ·  Active: platinum mining
The thinking behind the platform — Research library →

This is not
for everyone.

The right operator isn't asking for more coverage. They're asking why the coverage they have keeps failing.

Mining  ·  Infrastructure  ·  Strategic assets  ·  High-value remote operations
You cannot afford a predictable system.
You operate in a high-risk, high-loss environment where organised adversaries study operations before acting.
You need prevention — not a faster reaction once the plan is already formed.

Built from the adversary's side of the problem

Parthenius Air is a South African Adaptive Deterrence Intelligence company. We combine licensed aerial operations with the Zerathis Blindspot™ intelligence platform to measure what an adversary is learning about a site — and to close that gap before it is exploited.

The doctrine did not come from conventional security. Our Managing Director engineered guidance systems for guided munitions at Denel Dynamics. Like terminal guidance, terminal intelligence operates in the final decision phase — continuously observing a moving target, updating its model of behaviour, and driving its own uncertainty down until it can commit. He saw the same loop decide races as a performance analyst with Team Shosholoza at the 2007 America’s Cup, and the same loop run by adversaries against every operation he worked. Zerathis is the counter: a faster loop that keeps the adversary’s confidence permanently below execution threshold.

6+
Years flying operations
ADI
Adaptive Deterrence Intelligence
G1424D
SACAA UASOC licensed
PSIRA
Registered 4340995

High-value sites, high-consequence threats

We work with operators whose assets are spread across large footprints, exposed to organised and adaptive threats, and where the cost of a breach is measured in more than the item stolen.

Mining

Platinum, gold and uranium operations — illegal mining, cable and copper theft, and organised extraction across active and idle sites.

Critical Infrastructure

Power, water and industrial infrastructure — large perimeters, standing assets, and the theft or sabotage that takes them offline.

Oil & Gas

Energy infrastructure and remote installations — wide, exposed footprints where surveillance and deterrence must reach beyond the fence line.

One engagement to start.
No platform commitment.

The Blindspot Audit is a standalone engagement. You commission it, we deliver a written intelligence assessment of your site. What happens after that is your decision.

The audit does not obligate you to the platform
01
Standalone · 30 days

Blindspot Audit

We map your operation, capture your response pattern, and identify what a patient adversary has already learned about how you operate.

See full detail →
02
Deliverable

Site Threat Fingerprint

A seven-section written intelligence assessment. What the adversary can observe. What they have likely already mapped. Rarely comfortable. Always actionable.

See full detail →
03
Full Deployment

Zerathis Deployment

The platform activates. The intelligence engine begins building your 90-day baseline. Weekly briefs, monthly reports, and active predictive intelligence build as the data matures.

See full detail →
Fixed scope · Fixed duration · No platform required to begin.
Most clients proceed to deployment after receiving the Fingerprint.
// Commission a Blindspot Audit

When it matters,
you need to be
able to say:
we knew it
was forming.

Right now, you have no system that gives you that sentence. No metric that shows the adversary's planning cycle in progress. No alert that fires before the confidence threshold is reached.

The Blindspot Audit is the first step to changing that. 30 days. A written intelligence assessment of your site's actual adversarial exposure — not what your incident log shows, but what the planning phase looks like before it becomes an incident.

Most clients find the picture is further along than they expected.

// Tell us what you need — confidential

// High-risk operational environments only.
// Your enquiry is treated as strictly confidential.