Evidence before assertion
Preserve source, time, scope, and uncertainty so every conclusion can be inspected.
Authorized defensive security · cloud · AI
Technology built for defenders who need evidence, not noise.
Icarus Online LLC builds practical systems for understanding internet exposure, strengthening cloud and identity environments, and applying AI to authorized defensive cybersecurity work.
MISSIONStrengthen the defensive security ecosystem
SCOPEOwned or explicitly authorized systems
ACCESSApproved internal operators only
Reason for being
Security work should become more capable without becoming less accountable.
Security teams move through noisy evidence, fragmented systems, and high-consequence decisions. We exist to turn that complexity into bounded, reviewable work: evidence before assertion, authorization before action, and human judgment at the control point.
We build and operate technology at the intersection of cloud infrastructure, identity, security engineering, and responsible AI—without hiding authority, uncertainty, or risk.
How we work
A deliberate path from observation to action.
Authorization before action
Work only on systems we own, operate, or are explicitly authorized to assess.
Human control at the boundary
Keep publication, provider, credential, production, and destructive actions behind explicit decisions.
Bounded automation
Limit identities, targets, data, duration, and side effects. Stop closed when evidence or authority is missing.
Rebuildable systems over hidden dependencies
Prefer inspectable sources, documented recovery, and clear authority over opaque operational memory.
Evidence in practice
Credibility comes from the work and its boundaries.
Swampcat
Swampcat explores certificate transparency observations and attack-surface relationships so defenders can inspect why entities appear connected. The product emphasizes source provenance, explainable relationships, and bounded active checks when enabled.
Explore SwampcatProfessional practice
Mathias Koeppel’s professional practice covers cloud architecture, identity, platform security, secure AI adoption, and operations in enterprise and regulated environments.
View professional workOperating discipline
We separate source authority, reviewable evidence, and consequential change. Public claims stay narrower than private operating records, and automation stops when authority or evidence is missing.
Read our responsible-use commitmentsOne company · distinct surfaces
Clear relationships, no invented distance.
Swampcat
Icarus Online’s security-software product.
Mathias Koeppel
The professional consulting and portfolio surface for cloud, identity, infrastructure, security, and AI work.
MKMetalPours
Icarus Online’s specialty-manufacturing and commerce business.
Transparent application status
Preparing, not implying.
Icarus Online is preparing an organization-level Daybreak application for internal, authorized defensive cybersecurity workflows.
Icarus Online does not currently claim Daybreak approval, access, partnership, or OpenAI endorsement.
Review the intended use boundaryContact
Start with the scope.
Then follow the evidence.
For company, security, or collaboration inquiries:
support@icarus.onlIcarus Online LLC · Lake Forest, California