Pyxis IT
Demo

3 solutionsRegulators, authorities and government agencies

From a public IP address to a subscriber — with evidence that stands up.

ORION links IP addresses, sessions and network records so authorities and operators can move from an IP address and a time to the right subscriber, then rebuild the full activity timeline.

Request a confidential briefingAll solutions
01Subscriber attribution

From an IP addressto the right subscriber.

CGNAT, NAT and IPv6 have made subscriber attribution one of the hardest problems in modern investigations. ORION correlates CGNAT, RADIUS, DPI and CDR records so that authorities and operators can move from an IP address and a timestamp to the right subscriber session — then reconstruct the full activity timeline.
  1. 01

    Public IP + timestamp

    Request from the authority

    203.0.113.24 : 50412

    14:02:11 UTC

  2. 02

    CGNAT & RADIUS correlation

    Shared address resolved to one session

    NAT session matched

    Login record linked

  3. 03

    Subscriber identified

    MSISDN

    +••• ••• ••• 417

    Lawful access only

  4. 04

    Activity timeline

    Sessions · locations · evidence

    Sessions rebuilt

    Evidence pack ready

Illustrative example — values shown are not real data.

02Solutions

What ORIONdelivers for you.

Each solution is delivered through dedicated ORION modules. The scenarios below illustrate what they enable.
  1. 04

    Log Management System (LMS)

    Link IP addresses, mobile numbers and location to ensure full user traceability for operators and authorities.

    Scenarios

    • IP ↔ MSISDN correlation
    • CGNAT session mapping
    • Geolocation traceability
    • Long-term log retention

    Built on · CGNAT · RADIUS · CDR/xDR

  2. 05

    Deep Investigation

    Rebuild subscriber activity from linked network events, with precise timestamp correlation, and deliver evidence packs for lawful investigations.

    Scenarios

    • IP + timestamp → subscriber resolution
    • Session timelines
    • Evidence packs

    Built on · CGNAT · DPI · CDR/xDR

  3. 06

    Lawful Interception & Compliance

    Support lawful interception and regulatory obligations with auditable, standards-aligned processes.

    Scenarios

    • Lawful interception
    • Regulatory reporting
    • Audit trail

    Built on · Mandate-based · Auditable

03Built for authorities

Trust, built infrom the first query.

Every access is mandated, every action is recorded, and every piece of evidence can be defended.
  • 01

    Lawful by design

    Mandate-based access, role separation and a complete audit trail on every query.

    Auditable

  • 02

    Evidence you can defend

    Timestamped, integrity-protected and exportable evidence packs.

    Evidence packs

  • 03

    Sovereign deployment

    Runs entirely on-premise, within national infrastructure. Data never leaves the country.

    On-premise

04In depth · Deep Investigation

Every event
leaves a trace.

Answer authorities’ requests quickly and reliably: ORION links each network event to the right subscriber, place and time, and packages the evidence.

  1. 01Network event
  2. 02Exact time
  3. 03Type of activity
  4. 04Network location
  5. 05Area covered
  6. 06Linked events
  7. 07Evidence ready
GEO-PERIMETER · BTS / CELL-IDΔt 214 µsΔt 279 µsΔt 493 µsEVENT 01 · CELL 412714:02:11.482913PACKET VOLUME FINGERPRINTEVENT 02 · CELL 413114:02:11.483127PACKET VOLUME FINGERPRINTEVENT 03 · CELL 412914:02:11.483406PACKET VOLUME FINGERPRINT
  • Event 01 · CELL 412714:02:11.482913
  • Event 02 · CELL 413114:02:11.483127
  • Event 03 · CELL 412914:02:11.483406

Case file●

  • Subscriber identified
  • Timeline rebuilt
  • Location confirmed
  • Evidence file ready
  • 01

    Recognise the type of activity

    Tell what a session is from the shape of its traffic.

    Packet volume fingerprinting

  • 02

    Rebuild the exact timeline

    Line up events from every source to the exact moment.

    Precise timestamp correlation

  • 03

    Know where it happened

    Place each activity in the network area it came from.

    Cell-ID geo-perimeter

  • 04

    Pinpoint where and when

    Combine several events to narrow down place and time.

    Multi-event triangulation

  • 05

    Lawful interception

    Respond to legal interception requests, within the law.

    Lawful Intercept (LI)

  • 06

    Find the subscriber behind an IP

    Identify the real subscriber behind a shared internet address.

    CGNAT mapping

  • 07

    Ready-to-use evidence

    Deliver structured, auditable evidence files to the authorities.

    Evidence pack

  • 08

    Log retention & traceability

    Keep and search network logs as regulations require.

    Log Management System (LMS)

05How it works

Works with the systemsyou already run.

For your technical teams: ORION connects to the sources below, correlates them, and delivers insights, dashboards, alerts and operational workflows.

Data sources

  • CGNAT / PCRF
  • RADIUS
  • DPI / IPFIX
  • CDR / xDR
  • Kafka streams

Powered by ORION

  1. 01

    Collect

    Every source, one place

  2. 02

    Clean

    Reliable, consistent data

  3. 03

    Connect

    Events linked together

  4. 04

    ORION

    One intelligence layer

  5. 05

    AI

    Learns and predicts

  6. 06

    Insight

    Ready for your teams

3 solutionsAlso from ORIONFor Service Providers

06Contact

Let's talk aboutyour business goals.

Fraud, churn, compliance — tell us your challenge and we’ll show you how ORION can help.

United Kingdom · Headquarters

Bridge Street, KingtonHerefordshire HR5 3DJ

+44 744 144 3050

Tunisia · Office

Tunis, Tunisia

Request a demo

Sending opens your email application with your message ready to send.