Match an authoritative advisory only after its vendor, model, version and authorised ownership are verified against the organisation’s asset record.
GAS AI SECURE · ENQSI Sentinel
See verified security risk. Keep control with people.
GAS AI SECURE is an executive-security planning and intelligence layer for systems an organisation owns or is explicitly authorised to operate. It joins trusted threat intelligence with controlled access-control, cyber-security and wireless-evidence integration plans, while camera and microphone access are hard-blocked in the public app—without becoming a covert-monitoring, radio-interception or autonomous physical-control tool.
✓ Authorised sources only✓ Evidence before escalation✓ No silent physical action
What this module is designed to do
One controlled view of cyber and physical risk.
The ENQSI advantage is not a generic alert stream. It is a permissioned Threat → Asset → Event → Decision graph: executives can see what is exposed, why it matters here, the evidence supporting it and the narrow, reversible next step.
Start with device health, tamper, event and configuration metadata. Raw media is a separately governed case-evidence decision.
Threat, asset, signal, privacy and evidence responsibilities are shown as a future review design. Separate AI agents are not running in this public planning tool.
GAS prepares an evidence-linked ticket, notification or maintenance request. A person and policy remain responsible for any action.
Executive security readiness
Start with authority, scope and proof.
Build a private connector-readiness brief before any data source is linked. This first release only stores the plan you create on this device and refreshes an allowlisted vulnerability source through GAS AI.
Privacy posture & authorised-network review
Block this site from camera and microphone access.
GAS AI now enforces a site-wide browser policy that disables camera and microphone access for this site and its embedded content. It does not change your device-wide settings or other apps—those remain under your control.
The site cannot request, open or capture from your camera.
Browser setting unavailableThe site cannot request, open or record from your microphone.
Browser setting unavailableNo clandestine wireless scanning
Authorised Wi‑Fi exposure review.
Browsers do not expose nearby or hidden Wi‑Fi network lists to websites. This local audit records a network or area that you own or administer so the authorised network administrator can compare it with the approved access-point inventory.
- Never joins a network, collects a password, probes an address or intercepts traffic.
- Never searches neighbouring networks or attempts to reveal a hidden SSID.
- Real inventory checks require a private, read-only controller or managed-device integration with written authority.
MANAGED-INTEGRATION GATEPrivate deployment required for real inventory.
Only an enrolled, organisation-authorised managed device or network controller may supply a read-only approved access-point inventory.
GAS AI SECURE will fail closed for unmanaged devices, unknown sites and requests outside the approved asset register.Authorised RF & wireless assurance
Turn a wireless observation into evidence—not a guess.
A browser cannot scan nearby Wi‑Fi, Bluetooth or radio signals, find a hidden SSID, or prove that a device is a “bug”. GAS AI SECURE therefore records only an authorised, local review and reserves real telemetry for a private, read-only connector to an owned controller, managed device or dedicated passive sensor.
Match an organisation-controlled controller or WIDS observation to approved access points, client posture and site records.
Not a nearby-network scan.Reconcile approved paired or enrolled-device classes through managed-device policy—not a person’s location or a rotating identifier.
No pairing or background discovery.Compare receive-only sensor metadata against an authorised baseline, then require physical corroboration before escalation.
Not interception or decoding.Route an unexplained item, lens reflection, cable or power source to an authorised visual and technical inspection.
Not a hidden-device verdict.Executive Security Device Twin
Make the physical system visible—without turning it into a spy tool.
These are vendor-neutral visual replicas of overt, organisation-owned security devices. They demonstrate the small, read-only signal set that ENQSI can govern before any real connection is considered.
01Authorised deviceRegistered asset and approved zone
02Minimum signalHealth or permitted event metadata
03Evidence & dissentCorroborate before escalation
04Human decisionTicket, maintenance request or review
Swarm status: Watching. These cards describe planned review responsibilities, not running AI agents.
01Threat intelligenceWould normalise allowlisted advisories and never follow instructions inside them.
02Asset & firmwareWould prove whether a verified advisory is relevant to a registered asset.
03Signal correlationWould look for corroborated anomalies, not people or behavioural profiles.
04Privacy & policyWould check purpose, zone, retention, approval quorum and permitted actions.
05Evidence & dissentWould preserve provenance and challenge weak or single-source conclusions.
06Response plannerWould prepare a reversible ticket or notification; it could not control physical systems.
Allowlisted intelligence
Current connected-device exposure watch.
CISA’s Known Exploited Vulnerabilities catalog is refreshed through a fixed GAS AI endpoint for authorised security and wireless device relevance. ENQSI does not scrape arbitrary webpages or send the feed to an AI model.
Executive impersonation control
Verify before any high-risk request.
GAS AI SECURE can prepare a verification drill for unexpected requests involving money, credentials, access or confidential information. It does not treat a voice, a caller ID or a message as proof of authority.
Non-negotiable safety boundaries
Security without turning people into the product.
GAS AI SECURE is deliberately limited to lawful, accountable security work. It does not provide covert surveillance, third-party device discovery, consumer-browser Wi‑Fi, Bluetooth or RF scanning, personal tracking or autonomous physical control.
No covert collection, tracking or third-party device discovery.
Cameras are hard-blocked in the public app; any future authorised integration begins with health, tamper and permitted event metadata—not unrestricted live video.
Microphones are off by default and hard-blocked in the public app; no continuous audio, voiceprints or conversation transcription in this planning tool.
No consumer-browser or third-party Wi-Fi, Bluetooth or RF scanning. A private deployment may accept read-only controller, managed-device or receive-only sensor metadata only within an authorised asset inventory.
No wireless interception, content capture, device pairing, identifier retention, deauthentication, jamming or tracking. An unresolved signal is never labelled a bug or an unauthorised device without corroborated evidence.
Keys and access-control systems are read-only first. GAS AI SECURE cannot unlock, lock down, issue or revoke credentials.
No facial, gait or emotion recognition by default.
AI can prepare an evidence-backed recommendation; policy and accountable people decide any consequential response.
A real deployment requires a documented security purpose, authorised roles, local privacy and workplace-surveillance assessment, site notices where required, retention rules, connector-specific review and an incident-response process. This planning tool is not legal advice and does not connect a live device.
Delivery path
Build the control plane before the connection.
GAS AI SECURE will only progress to live authorised integrations once the relevant policy, private deployment, connector and audit controls exist.
- 01Executive threat radarActive in this module: source-linked threat intelligence and a local readiness plan.
- 02Read-only authorised physical-security observabilityRequires the preceding governance evidence and an authorised technical deployment.
- 03Read-only authorised wireless evidence reconciliationRequires the preceding governance evidence and an authorised technical deployment.
- 04Governed case managementRequires the preceding governance evidence and an authorised technical deployment.
- 05Restricted response orchestrationRequires the preceding governance evidence and an authorised technical deployment.
- 06Dedicated enterprise/private deploymentRequires the preceding governance evidence and an authorised technical deployment.
Research register · 24 July 2026
Built from evidence, not security theatre.
These primary sources inform the module’s current safety boundaries, device posture and planned specialist-review controls. Local legal and security review remains required before any customer deployment.
- W3C Permissions Policy
- W3C Media Capture and Streams
- CISA Known Exploited Vulnerabilities catalog
- CISA guidance for securing enterprise Wi‑Fi
- NIST guidance for Bluetooth security
- NIST technical-surveillance-countermeasures definition
- Australian Communications and Media Authority: jammers are illegal
- NIST IoT device cybersecurity requirements
- OWASP AI Agent Security Cheat Sheet
- OAIC security-camera privacy guidance
- NSW Workplace Surveillance Act 2005
Need the wider GAS AI privacy position?Read the public data boundaries before considering any sensitive connection.
Open Privacy & security →