Oil & gas

For most producing states, hydrocarbon receipts underwrite the national budget, and the assets that generate them are strung across hundreds of kilometres of open country and open water. A tapped pipeline, a sabotaged manifold or a shut-in terminal translates directly into lost fiscal room, and the operator carries the political weight of every outage. The exposure is unusually visible: fixed installations, predictable flows and long approach routes that an adversary can study at leisure.

What raises the stakes is that the same infrastructure sits at the seam of physical and cyber risk. Bunkering and illegal connections drain product in the field, while the supervisory systems that run pumping and metering present a quieter route to the same disruption. A ministry protecting oil and gas is therefore defending revenue, environmental standing and the credibility of its concession terms at once. That is why the picture over the asset and the resilience inside it have to be treated as a single problem.

The sensing layer starts overhead. Observation satellites give wide-area change detection over pipeline corridors and terminal approaches, flagging illegal connections and unexpected vessel movements before they become losses. Where fixed sites must be screened against the drone threat, Counter-UAS & loitering munitions provide detection tuned to small, slow targets and the means to defeat them, closing the airspace over a platform or refinery.

Protection then moves inward to the systems themselves. Infrastructure hardening reduces the attack surface of the control estate that runs pumping, metering and safety instrumentation, so a network intrusion cannot achieve what a physical raid cannot. Each of these is a real catalogue capability rather than an integration promise, and they are matched to the specific asset, whether a coastal terminal, an inland field or an offshore platform, so the operator receives a coherent screen rather than a shelf of unrelated equipment.

Engagement begins with a briefing that maps the assets, the flows and the threats the operator actually faces, before any capability is named. From there Unstrat matches capability to requirement under confirmed export-control position and end-user-certificate chain. The classification work is done first, not after, so the operator knows what can be represented, on what terms, before commitments are made. This keeps a sensitive, revenue-critical programme governed and traceable from the outset.

Delivery is phased so value arrives early: a baseline picture over the highest-value corridor, then persistent coverage across the wider estate, and finally the hardening and sustainment that let the operator run the capability itself. In-region sustainment and operator training are part of the same accountable engagement, so surveillance and protection do not lapse when a foreign contractor rotates out. One team owns the chain from first briefing through long-term operation.