Exploidus | High-Integrity Systems & Kernel-Level Cyber Defense
ANNOUNCEMENT: Aegis-Filter 4.07ns zero-allocation GNC engine released & scx_intent v2 pure BPF scheduler available. Read Technical Briefings →
SOVEREIGN HIGH-INTEGRITY SYSTEMS & CYBER DEFENSE

Deterministic Foundations for Mission-Critical Computing

Exploidus engineers zero-allocation state estimation, line-rate eBPF cyber defense, and deterministic kernel scheduling for aerospace, defense, and sovereign cloud infrastructure. Built from first principles in memory-safe Rust.

Explore Capabilities ↓ scx_intent BPF
Zero Dynamic Allocation Pure In-Kernel eBPF DO-178C Architecture
LIVE ENGINE
Execution Latency
4.07 ns
Covariance Status
JOSEPH STABLE
Ingress Throughput
84.2 Mpps
Mitigation Action
XDP_DROP (<82ns)
Active DSQ Tiers
5 In-Kernel DSQs
Starvation Relief
0% DROP / 0 JITTER
4.07 ns
Kalman filter scalar loop execution (16 CPU cycles at 4GHz)
100 Gbps
Line-rate eBPF/XDP hardware ingress DDoS mitigation
0 Alloc
Pure #![no_std] zero-heap aerospace memory guarantees
5 DSQ
Intent-driven preemptive Linux kernel scheduler queues
3x DOI
Zenodo & figshare indexed publications (HuddleCluster & XDP-Guard)

Engineered For Sovereign Reliability

Exploidus unifies deterministic guidance algorithms, kernel-level execution scheduling, and line-rate hardware network defense into a resilient foundation for defense and enterprise.

Division I: Autonomous AI, Aerospace GNC & Kernel Systems

Edge AI Robotics, Aerospace GNC, Sensor Fusion & Deterministic CPU Scheduling

AEROSPACE GNC & KERNEL SYSTEMS
LINUX KERNEL RFC // PR #3845 SCHED-EXT PR #3845 (IN REVIEW) →

scx_intent BPF

Intent-Driven 5-Tier Preemptive Kernel Scheduler (Sched-ext RFC)

Pure in-kernel eBPF CPU scheduler engineered for Linux sched-ext (Linux 6.12+), submitted upstream under PR #3845. Dynamically categorizes tasks into 5 dedicated Dispatch Queues: Audit, Interactive, IO, Network, and Compute - eliminating priority inversion and micro-stuttering under saturated multi-core workloads.

  • Dedicated BPF DSQs with multi-tier starvation relief.
  • Sub-microsecond task dispatch with zero user-space latency.
  • CachyOS and high-performance gaming/simulation tuned.
git fetch origin pull/3845/head:scx_intent && meson compile
HIGH-SPEED CYBER DEFENSE v0.4.0 ON CRATES.IO →

XDP-Guard Ingress

100 Gbps Line-Rate Driver-Hook eBPF DDoS Shield

High-performance eBPF/XDP network defense engine operating directly at the NIC driver DMA layer. Drops multi-gigabit SYN floods, UDP reflection amplification, and malicious malformed payloads before socket memory allocation occurs.

  • Line-rate XDP_DROP at hardware wire-speed (<100 ns).
  • Native Prometheus metrics exporter & Grafana dashboard.
  • Kubernetes DaemonSet with automated Helm deployment.
  • Zenodo DOI: 10.5281/zenodo.23120995
xdp-guard --iface eth0 --mode drv --rules /etc/xdp/

Division II: Bio-Mimetic Distributed Fabric & Threat Intelligence

Self-Organizing Thermal Dynamic Balancing & Real-Time Cross-Vector Threat Intelligence

PYPI: huddle-cluster & cnsl
BIO-MIMETIC CLUSTERING GITHUB & 2x DOI →

HuddleCluster

Thermal-Aware Self-Organizing Distributed Balancer

Inspired by the thermal equilibrium physics of emperor penguin huddles. Dynamically redistributes high-frequency workloads, evicts thermally saturated compute nodes, and ensures zero-downtime clustering without a single point of failure.

  • Biomimetic core temperature redistribution algorithms.
  • Self-healing cluster mesh with instant gossip topology.
  • Officially published on PyPI with open DOI scientific paper.
pip install huddle-cluster
CROSS-VECTOR SIEM ENGINE PYPI RELEASE →

CNSL Intelligence

Correlated Network Security & Predictive Trajectory SIEM

Lightweight, self-hosted security log intelligence and cross-vector correlation engine. Tracks multi-stage attack velocity across distributed services, ingests high-volume Kafka event topics, and executes automated host-level iptables firewall quarantines before systemic lateral breach occurs.

  • Real-time cross-vector correlation across disparate authentication & service logs.
  • High-throughput asynchronous stream ingestion via native Apache Kafka (aiokafka).
  • Automated predictive trajectory mitigation via host firewall & iptables isolation.
pip install "cnsl[full]"

The Unified Exploidus Pipeline

How Exploidus modules integrate from the physical network wire up to autonomous aerospace control loops. Click any tier to inspect its technical specification.

01 // INGRESS WIRE

XDP-Guard

NIC Driver DMA hook. Filters 100Gbps SYN/UDP floods in under 100ns.

02 // CLUSTER MESH

HuddleCluster

Thermal equilibrium balancing. Distributes load across healthy node topology.

03 // KERNEL RUNTIME

scx_intent

Preemptive eBPF scheduling across 5 DSQs. Zero starvation on critical threads.

04 // SENSOR LOOP

Aegis-Filter

4.07 ns zero-allocation Kalman/UKF. Guarantees deterministic state convergence.

SPECIFICATION // TIER 01: XDP-GUARD DRIVER HOOK
• Hook location: XDP_DRV (Direct Network Interface Card DMA buffer)
• Action: Evaluates SYN cookies, ACK flood patterns, and reflection signatures via eBPF BPF_MAP_TYPE_LRU_HASH.
• Return: Emits XDP_DROP instantly, preventing Linux sk_buff memory allocations under volumetric attack.
PEER-REVIEWED PUBLICATION & OPEN SCIENCE

Bio-Mimetic Load Balancing Under Extreme Thermal Constraints

Authored by Rahad Bhuiya, this research presents an adaptive mathematical model for node clustering based on thermodynamics in extreme environments. Indexed on both Zenodo and figshare with permanent Digital Object Identifiers, cross-listed across global scholarly databases.

// CITATIONS
@software{bhuiya_2025_huddle,
 author = {Bhuiya, Rahad},
 title = {HuddleCluster},
 year = {2025},
 url = {https://github.com/rahadbhuiya/HuddleCluster}
}

@software{bhuiya_2026_zenodo,
 author = {Bhuiya, Rahad},
 title = {HuddleCluster},
 doi = {10.5281/zenodo.20348019},
 year = {2026}
}

@article{bhuiya_2026_figshare,
 author = {Bhuiya, Rahad},
 title = {HuddleCluster},
 doi = {10.6084/m9.figshare.32397180},
 year = {2026}
}

@software{bhuiya_xdp_guard_2026,
 author = {Bhuiya, Rahad},
 title = {xdp-guard: Memory-Safe In-Kernel XDP Firewall & Per-IP Rate Limiter in Pure Rust},
 month = {oct},
 year = {2026},
 publisher = {Zenodo},
 version = {v0.1.0},
 doi = {10.5281/zenodo.23120995}
}

Open Core & Commercial Pilots

We provide permissive open-source foundations alongside bespoke engineering, mission certifications, and dedicated enterprise SLAs.

COMMUNITY EDITION

Open Core

For independent researchers, systems engineers, and open-source contributors.

  • Permissive MIT & Apache 2.0 licenses
  • Full access to public GitHub repositories
  • Standard community issue tracker & Discord
  • Public benchmarks & documentation
Access Repositories
COMMERCIAL ENTERPRISE

Enterprise Fleet

For data centers, cloud providers, and mission-critical network operators.

  • High-availability 24/7 SLA & incident triage
  • Custom eBPF packet mitigation & telemetry rulesets
  • Enterprise multi-cluster Helm & K8s integration
  • Custom Linux kernel patches & CachyOS optimizations
DEFENSE & AEROSPACE

Mission GNC

For aerospace contractors, defense agencies, and autonomous robotics fleets.

  • Custom DO-178C / ISO 26262 verification artifacts
  • NASA F Prime framework integration & avionics tailoring
  • Hardware-in-the-Loop (HIL) state estimation tuning
  • Direct Principal Architect consulting & advisory
YS

Rahad Bhuiya

Founder & Principal Systems Architect // @rahadbhuiya

Low-level systems programmer, kernel developer, and eBPF researcher. Dedicated to building sovereign computing infrastructure from the silicon up - where memory safety is non-negotiable and deterministic execution is mathematically proven. Contributor to the Linux kernel sched-ext ecosystem, author of published peer-reviewed distributed algorithms, designer of the Aegis-Filter aerospace state estimation engine, and upstream contributor to Linus Torvalds' Subsurface project and NASA F Prime flight software.