Security ontologies that reason
Most security graphs are drawings — nodes and lines someone placed by hand. These are different. Each one is a small ontology written in Turtle and run through the open-source Open Ontologies reasoning engine. The engine classifies the entities for you, and when you propose one new rule it computes the blast radius — exactly who it affects — and proves the model stays logically consistent. Facts are curated from public sources; the consequences are computed, not asserted.
Threat-Actor Ontology
Actors, techniques, malware and target sectors — then watch the reasoner classify them and recompute the blast radius of one new rule.
Controls & Frameworks Crosswalk
CIS Controls v8, NIST CSF 2.0 and ISO 27001:2022 as one ontology: the reasoner chains the mappings to show end-to-end coverage, then reclassifies controls when you propose one rule.
Breach-Index Ontology
Firms, their vendors and public supply-chain incidents — the reasoner chains "exposedVia" to show who inherits which breach, then reclassifies victims when you flag a vendor.
Reasoning Teaching Lab
Users, roles and permissions: the engine derives effective access, then REJECTS a separation-of-duties violation and proves the model inconsistent — a forged conclusion refused.
Vendor / Supply-Chain Trust
Your app, its vendors and their sub-processors: the reasoner computes fourth-party exposure, then propagates a trust downgrade up the chain when a shared host is compromised.