Four products. One Quorum.
An AI Quorum for multi-vendor infrastructure

Infrastructure that understands itself — and gets smarter every day.

Four vendor-neutral appliances — firewall, virtualization, network, backup — each running its own local-inference AI in its own specialty. Above them, a meta-control plane called DEC SDNS lets the four AIs reach decisions that cross domains, which no single product can make alone. "Is this VM safe to migrate?" takes bandwidth, compute, security-group, and backup-chain knowledge at the same time. The Quorum is where that question gets answered.

The Meta-Control Plane

DEC SDNS — four AIs, one conversation.

Each of the four DEC-LLC products runs its own local-inference AI in its own specialty and knowledge domain — firewalls, hypervisors, network vendors, backups. SDNS is the shared data contract that lets those four specialist AIs talk to each other. No message broker. No central server. No customer data leaving the appliance. Every product publishes what it knows; every product can query what the others know. The Quorum emerges from the conversation.

The five standard views
Hosts · Networks · Assets · Workloads · Health

The five categories every product fills in from its own specialty. Read from the Quorum, written by whichever product is closest to the truth.

SDNS
AI Quorum
cross-domain consensus
The cross-domain question
“Should we migrate this VM?”

Needs bandwidth · compute · security-group · backup-chain knowledge at once. No single product has all four. The Quorum is where the question gets answered.

Federation, not orchestration.
SDNS doesn't take over your products — it holds the shared context they can all read and write.
Local inference throughout.
Every AI runs on its own appliance. Customer data never leaves the customer's site. Cloud LLM APIs are not in the path.
Architectural, not feature-deep.
The Quorum isn't a feature bolted onto a product — it's a property of how the four products were designed together. Forty years of infrastructure engineering sits under the surface.
Inside the Quorum SDNS Architecture

Each of the four domain products ships and earns its own keep. SDNS is what happens when two or more run together.

listening...
🔊 click to hear our AI welcome you

The problem isn't your team or your tech. It's the gaps between your tools.

Most IT trouble doesn't start with a hacker. It starts in the space between systems that were never built to talk to each other. A firewall change nobody told the network team about. A backup that silently stopped working because a credential rotated. A switch that's been reporting problems — on a dashboard that nobody opens because it's the fifth dashboard in the stack.

Your team isn't missing things because they're careless. They're missing things because they're asked to watch a dozen tools that don't share a single conversation, keep a single log, or agree on a single version of the truth.

Our appliances do the continuous, documented work that usually lives in one engineer's head — recording every change, verifying every backup, explaining every rule, and watching every device — so the knowledge stops being tribal and becomes something the whole team can search.

We build five appliances that do exactly this — for your network, your servers, your firewall, your backups, and your ability to move between clouds without asking permission. They run under your authority, in your rack, your cloud, your colo, wherever your infrastructure lives, and they keep doing their job when the threats on the other side of the wire get stranger than they are today.

The four products that feed the Quorum.

Firewall, virtualization, network, backup. Each is a complete, vendor-neutral appliance that earns its place on the merits of its own specialty — a deep product any infrastructure team can adopt one at a time. Each also speaks the SDNS data contract, so the moment two or more run together, the AI Quorum opens up cross-domain reasoning a single-vendor stack isn't built for.

Looking for plugin SKUs (DEC FireMigrate, DEC IPv6Auto), adjacent products (DEC GA-FS), or the full SDNS AI Quorum? See the Products menu above.

🛡

DEC OpenUTMOpen Unified Threat Management

Zero-Trust by design. Edge router, VPN concentrator, WAF / reverse proxy, DNS / DHCP, IDS / IPS, and AI-assisted cybersec policy engine — in one open-source appliance
  • Handles: nftables, FRR (BGP/OSPF/static), IPsec + WireGuard + OpenVPN + Tailscale + custom-SSL VPNs, Kea DHCPv4/v6, BIND9 DNS, HAProxy, WAF, IDS/IPS, VLAN/VRF/zone segmentation
  • Does: edge routing and VPN concentration; DNS + DHCP services; WAF and reverse proxy; IDS / IPS; zone-agnostic policy engine; AI-assisted rule explanation; AI-driven cybersec policy automation; external firewall and host ACL cybersecurity posture audit; first-party plugin ecosystem
  • Scale: 25 Gbps capable · 40 Gbps target Q1 2027 · 100 Gbps target Q3 2027
  • Architecture: core–subcore topology (with or without agents) — from a single-site gateway to federated multi-site mesh
  • Deploys: Linux-based appliance ISO on bare metal, VM, or cloud appliance VM
🔄

DEC IVMIAInfrastructure & Virtualization Management, Inventory & Analytics

Multi-platform physical servers, workstations, hypervisor and container orchestration, and workload management — one appliance, every platform
  • Handles: libvirt/KVM, Proxmox VE, VMware ESXi, Microsoft Hyper-V, VirtualBox, Docker, Podman, Incus, Kubernetes, Windows 11, Linux, and macOS
  • Does: unified inventory and cross-platform workload management; workload orchestration across hypervisors, containers, and physical / workstation endpoints; migration automation; cost optimization and chargeback attribution per VM / host / workload; idle and orphaned resource identification; capacity forecasting; AI-assisted platform comparison; health metrics (CPU / memory / disk / temp)
  • Architecture: core–subcore topology (with or without agents) — from a single site to federated multi-site fleets
  • Deploys: Linux-based on-prem or cloud appliance
🖧

DEC NIVMIANetwork Infrastructure & Vendor-agnostic Multi-platform Inventory & Analysis

Multi-vendor network orchestration: inventory, ACL & traffic management, migration, cost / capacity analytics, and AI-assisted operations across 16 platforms
  • Handles: 16 vendor platforms — Cisco IOS/IOS-XE/NX-OS, Arista EOS, Aruba AOS-S, Juniper JunOS, TRENDnet, TP-Link, MokerLink, D-Link, Netgear, Ubiquiti UniFi, FortiGate, Palo Alto PAN-OS, OPNsense/pfSense, Cisco SD-WAN, firewalld
  • Does: nightly device config capture (SSH/SNMP/telnet/API); git-tracked config vault with golden-copy tagging and drift detection; switch ACL and traffic orchestration; migration automation across vendor platforms; AI-assisted analyses; AI-assisted configuration audit, operations, and migration; AI-assisted plain-English change explanations; cost optimization and chargeback per device; capacity forecasting
  • Architecture: core–subcore topology (with or without agents) — from a single site to federated multi-site fleets
  • Deploys: Linux-based on-prem or cloud appliance
🔒

DEC VaultSyncCross-platform backup, restore, sync, and assisted-HA orchestration

One appliance for backup, restore, cross-platform migration, bidirectional sync, and assisted HA — across any device, any storage, any hypervisor
  • Handles: iPhone / iPad / Android mobiles, Windows / Linux / macOS workstations, home NAS (Synology, QNAP, TrueNAS), enterprise SAN (Pure Storage, NetApp, Dell EMC, iSCSI / FC / NVMe-oF), hypervisor VMs (libvirt/KVM, Proxmox VE, VMware ESXi, Hyper-V), container volumes (Docker, Kubernetes PVCs), network device configs (via NIVMIA). Targets: Azure Blob, Oracle OCI, S3-compatible, Proxmox Backup Server, local disk, tape, or a different hypervisor platform (restore a VMware VM onto Proxmox, a Hyper-V VM onto KVM, etc.).
  • Does: scheduled encrypted snapshots, automated restore-testing, cross-platform restore (VMware → Proxmox in one operation), cross-platform bidirectional sync (across heterogeneous storage), assisted HA state-sync orchestration, air-gapped immutable backups, ransomware-survivable backup plane, tamper-evident audit trail
  • Architecture: core–subcore topology (with or without agents) — single-site appliance or central core federating many subcores across sites
  • Deploys: Linux-based on-prem or cloud appliance

The ecosystem around the orchestration suite

Each suite product supports a plugin architecture. Commercial plugin SKUs include DEC FireMigrate (cross-vendor firewall migration), DEC IPv6Auto (IPv6 transition), and 16+ network-vendor plugins for DEC NIVMIA. Additional standalone products like DEC GA-FS (Git Advanced Fleet Sync) live in the Other Products category. The DEC SDNS AI Quorum is the cross-product coordination SKU that activates when two or more suite products run together.

OpenUTM Plugins IVMIA Platform Plugins NIVMIA Vendor Plugins VaultSync Source/Target Plugins DEC GA-FS DEC SDNS (AI Quorum)

By the numbers

Suite and plugin breadth · infrastructure under DEC-LLC management · engineering depth on the core team

Suite breadth
4
Suite products — OpenUTM, IVMIA, NIVMIA, VaultSync
30+
Platform integrations across the suite
16
Network-vendor plugins (NIVMIA)
12
Hypervisor, container & OS plugins (IVMIA)
6
Edition tiers per suite product
$0
Community tier, forever
Dogfood — infrastructure DEC-LLC runs on its own products
12
Switches
7
Routers
10
Firewalls (4 prod / 6 lab)
12
Physical servers
18
Virtualization platforms
127+
Production / lab VMs
100
IoT devices
Engineering depth
65
Combined engineering years on the core team (40 + 25)
2010
Year founded
~1.2M
Lines of production source code across the catalog
~2.7M
Lines total: code + docs + infrastructure-as-code

Every DEC-LLC product runs in our own racks before it reaches a customer. Every case study on the site is a real deployment outcome.

Whitepapers

Deeper reading on the architecture, philosophy, and AI posture behind DEC-LLC products.

Whitepaper

AI Domain Awareness

How DEC-LLC's local-AI agents learn a customer's specific infrastructure, not a vendor-aggregated model — and why that matters for security, analysis, and advisory.

Whitepaper

Infrastructure Analysis

The analytical foundation behind DEC IVMIA and DEC NIVMIA — inventory, drift, cost attribution, and capacity forecasting for multi-vendor fleets.

Whitepaper

Customer-First Philosophy

Why DEC-LLC products answer to the person running them — not to a vendor cloud, not to a subscription dashboard, not to telemetry you didn't sign up for.

Whitepaper

SDNS Architecture

How DEC-LLC products coordinate when two or more are deployed together — shared databus, unified identity, event federation, cross-product AI.

Why DEC-LLC

Your appliance, your authority. Our products run under your control — on your hardware, in your cloud, wherever your infrastructure lives — without calling home to us for permission. If your internet dies, they keep working. If we vanish tomorrow, they keep working.
Community tier is free — for real. The free tier isn't a crippled trial. It's the same appliance with the same hardening and the same updates, just limited to smaller fleets. A home enthusiast, a community nonprofit, or a two-person business runs the exact same product a Fortune 500 runs.
Security is not a paywall. Community and enterprise customers get the identical security hardening — same protections, same update process, same locked-down design. We don't leave small customers vulnerable to grow the upsell.
Open source where it matters. Our tools are auditable. Our architecture is documented. Our future is not tied to a venture capital exit that makes you collateral.
Built for the threats of today and 2030, not 1960. AI attackers and quantum computers are already changing what "secure" means. Our products are designed today to survive even when such threats become the new normal. Times change — we are prepared for them. See what's on the horizon →

Open Ideas. Real Infrastructure. Your Authority.

Every DEC-LLC product is built by engineers who run it themselves, for customers who deserve to own what they deploy. Start free. Pay when you outgrow it. Keep what you built.

Browse the Appliances Talk to Us We mean it — Open Ideas
GPL & open source projects →

About DEC-LLC

DEC-LLC (Diwan Enterprise Consulting) builds infrastructure software for organizations that want to own what they deploy. We ship appliances — not cloud services — because we believe a business should not have to ask permission from a vendor to keep its own systems running.

We serve small businesses, nonprofits, MSPs, schools, and enterprises. Our community tier is free because infrastructure that only the wealthy can secure is infrastructure that doesn't deserve the word. Our enterprise tier pays for curation, mirroring, support, and the compliance artifacts that paying customers need.

Based in New York. Serving customers worldwide. Open ideas, documented architecture, honest pricing.

Contact

Questions, pricing, partnerships, or just want to talk? We'll get back to you within one business day.

Or call us: (201) 254-9971  ·  Full contact form