Home / Technology
Technology
The reference design.
For IT and technology directors who want to know what is actually in the closet. This is the standard design. Every site is adjusted to what you already run.
The parts of a typical install.
The brain: a Mac mini
Runs Pioneer as a supervised service: the dashboard, alerts, cases, search, detection and its own recorder. Quiet, low power, built for a network closet.
Detection, clips and recording
Pioneer finds people and vehicles on your camera feeds, keeps an event clip for every alert, and can record continuously so you can rewind. All of that stays on equipment you own. No per-camera subscription.
Door events
Works alongside your door system. It listens to door events and never unlocks a door. Exterior and life-safety doors stay on their listed hardware.
Firewall and zones
At install we set up four network zones: students and guests, staff, cameras and doors, and management. Zone checks are part of that work. Pioneer does not push rules to your firewall by itself.
DNS filtering
At install, we can set up Pioneer's own resolver so malicious and inappropriate destinations are blocked across zones, without a cloud DNS service.
Keyed remote access
At install, we set up keyed remote access on a few named devices. Removing a device's key removes its access. Staff use the dashboard on site.
Intrusion alerts
At install, we can turn on intrusion alerts so attack patterns in traffic can open a case and go through your alert rules.
System health
A health page on the box shows disk, recording, DNS, intrusion, zone and outage signals so facilities and IT see the same picture.
Encrypted backups
Backups are encrypted by default, with a second copy to a folder or web address you choose, kept off the single closet.
Hardening
Raising the bar on the weak points.
Staying local removes the biggest exposure: a vendor-cloud login that opens a live view of your building. These steps cover the paths that remain.
- Remote keys on a few named devices, never the whole IT team, set up at install
- Two-factor sign-in, and HTTPS on the dashboard
- Default-deny between staff devices and camera storage
- Disk encryption on the Mac mini, checked at install
- A locked closet, unused switch ports shut, guest Wi-Fi never on the camera zone
- Encrypted backups kept off the closet, with a second copy
Honest ceiling
What stays risky.
Insider risk and "a person with a key" never go to zero. The aim is to make those paths clearly harder than a flat network with a shared cloud password. We do not claim more than that.
A later phase, when the district is ready, can add 802.1X on staff ports and stricter device policies.
Later phase
Lockdown and fire-panel integration.
These need district policy and your fire authority's approval, so they are not part of the first install. When added, lockdown and fire stay distinct signals, exits stay open from the inside, and a fire alarm never becomes a free front door. Pioneer does not replace your listed fire alarm system.
See it on a setup like yours
Book a short demo, or send us what you run today and we will map it. No pressure and no pitch deck.