A common operating picture for teams without a SOC.
A browser-based 3D situational awareness tool. A photorealistic globe, seventeen live public-data feeds, and a server-side credential vault. Google Earth meets Palantir — for the operations cell, the mission org, and the small-team analyst who never had access to either one.
The convoy left thirty-eight minutes ago. Two pickups and a hilux, food and clinic supplies, four staff, a translator, and a community liaison who knows every village inside this corridor by name. They are watching the road. The operations team, two thousand kilometers away, is watching seven feeds layered on top of the same patch of ground.
The first thing they notice is in the sky. A military aircraft has been circling a long oval pattern eighty kilometers west of the route for the last forty minutes — flying at twenty-two thousand feet, no civilian flight plan filed. A public flight-tracking feed has been pushing its position every ten seconds; the consumer flight apps had already filtered it out. The operations team does not know why the aircraft is there. They know it is.
The second thing is a heat signature. A NASA fire-detection satellite flagged a hotspot six kilometers off the route, in the bush north of the corridor, eighteen minutes ago. It was warm when it first appeared. The next pass came through forty minutes later and the same spot of ground is reading hotter. The fire is not out. It is growing. It is also a hundred and twenty meters from a track the convoy will pass.
The third thing is a cluster. Thirty-five kilometers north of the corridor, the violence-incident database has logged four events in the last fourteen days — three of them with fatalities, all of them attributed to militant Fulani groups operating against farming villages along the river. The database categorizes much of this as “farmer-herder”, a framing the team rejects. On the shared map the dots are red, the label reads Fulani militant attacks, and the cluster is moving south.
The fourth thing is invisible until you look for it. The crowdsourced traffic feed on the primary route shows roads going quiet — stretches that should be carrying GPS-traced movement at this hour are not. Traffic has thinned by sixty percent in the last twenty minutes. Locals know something the operations team does not. The fact that they have stopped driving is itself the data point.
A fifth feed, the seismic monitor, is quiet. A sixth, the UN refugee layer, shows an existing displacement site forty kilometers north where the convoy will eventually stop. A seventh, the satellite tracker, shows an imaging satellite passing over the area in fourteen minutes — useful for follow-up imagery if anything happens.
The team makes a call. The convoy reroutes thirty kilometers east, adds ninety minutes to the trip, and goes around the cluster. The team on the ground does not know about the aircraft, the fire, the attack site, or the traffic falloff. They know the operations team told them to turn. Six hours later they are at the clinic site, unloading.
Overwatch is not built on a flat map. It is built on a photogrammetric reconstruction of the surface of the Earth — real buildings with real shadows, real terrain with real slope, real forests, real ocean meshes. Streamed live from Google’s 3D Tiles service, decoded by the same renderer NASA-AMMOS uses for planetary missions, drawn into a scene that runs in any modern browser.
The reason this matters is simple. A flat tile map shows you where a village is. A photoreal globe shows you what it looks like from the ridge above it — which roads have line-of-sight, which approach corridors are masked by vegetation, where the riverbed cuts, where the high ground sits. Operators read terrain. A globe lets them.
The globe is the canvas. The feeds are the picture. Overwatch fuses seventeen-plus public data sources into a single operational view — each one trivially available on its own, none of them useful in isolation. Grouped here by the question they answer.
Three feeds, one airspace. OpenSky Network pulls state vectors for roughly seven thousand civilian aircraft worldwide on a ten-second polling cadence, fused from ADS-B, MLAT and FLARM receivers. Every state vector carries ICAO24, callsign, position, altitude, velocity, heading and a position-source flag — everything needed to draw a trajectory that an operator can read at a glance.
ADS-B Exchange covers the flights commercial trackers filter out. Military movement, surveillance orbits, tanker tracks, evacuation flights, anything with a callsign prefix like RCH, EVAC, DUKE, or an ICAO24 hex inside a known military allocation. Same state vector, distinct visual treatment, persistent callsign label — because if a military aircraft is loitering near your convoy, you want it to be obvious.
CelesTrak TLE drives the satellite layer. Two-line element sets for active satellites are fetched once a day and fed to satellite.js, which propagates SGP4 / SDP4 orbits client-side every frame. The result is live ground tracks for the ISS, the visual-magnitude catalogue, the Starlink constellations and any other group the operator cares to toggle on — with orbit polylines extending ninety minutes forward and ninety minutes back from now.
ACLED is the canonical academic record of political violence. Overwatch pulls events — armed clashes, attacks on civilians, riots, abductions — with their actors, fatalities, sources, and geocoded coordinates, renders them as magnitude-scaled red pins, and clusters them on the globe by region. ACLED is updated weekly. Overwatch caches it for an hour at the proxy.
NASA FIRMS handles thermal anomalies. VIIRS and MODIS detections from the last twenty-four hours are rendered as heat-graded points, with brightness temperature and confidence band exposed in the inspect panel. FIRMS is how Overwatch sees fires — the literal kind, and the structural-burn kind that follows an attack on a village.
UNHCR and IOM DTM handle displacement. UNHCR’s population-of-concern API gives country-level totals and demographic breakdowns; the geographic companion endpoint returns refugee-site geometry. The IOM Displacement Tracking Matrix layers site-level IDP counts on top. The terrorattack dataset adds historical and recent attack records geocoded to the incident.
None of these feeds were built to work together. The reason Overwatch exists is so that they can.
OpenStreetMap road geometry, queried through the Overpass API, feeds a custom GPU particle system that animates traffic flow along the actual road graph. The particles do not represent real cars — they represent the road network being alive. When a region of road suddenly empties out, the operator sees a literal absence of flow against a region where flow is still healthy. The data point is the contrast.
Geocoding goes both directions. Forward geocoding through Geoapify and Nominatim lets an analyst type a place name and fly to it. Reverse geocoding lets the operator click an event pin and get back an administrative hierarchy — country, state, LGA, ward. Both run through the proxy so search history stays on the platform, not on a third-party server.
Overpass is also the on-demand detail mechanism. When the operator zooms into a region and asks for local features — clinics, schools, mosques, churches, petrol stations, water points — Overwatch fires an OSM query against the bounding box and overlays the result. Cached for a day. Use it once, never refetch.
The USGS earthquake feed is the quietest layer on the globe most days, and the most important one the day it goes loud. Magnitude-scaled markers, depth-coded color, sixty-second polling cadence. When an operations cell is running response in a seismically active region — Türkiye, Indonesia, Nepal, the Andes, the western US — having USGS already on the same canvas as the conflict, fire, and displacement layers means the cell does not have to switch context to a different tool the moment the ground starts moving.
It is also the layer that proves the philosophy. The earthquake feed is free, public, and trivially fetched. It has been free and public for thirty years. The only reason it does not already sit next to the convoy you are running, the camp you are managing, and the airspace you are watching is that nobody bothered to put it there. That is the whole job. That is Overwatch.
RainViewer rounds the theme out with the atmosphere. A two-hour rolling animation of global precipitation radar — storm cells, monsoon fronts, squall lines, dust events — tiled directly onto the globe and refreshed every ten minutes. Operators planning a convoy, an airlift, or a clinic day get the cloud over the ground in the same frame as the seismic events under it. The weather has always been the most consequential variable in field operations; it is now in the same view as everything else that matters.
GDELT is the open-news backbone. Every fifteen minutes the GDELT DOC API surfaces fresh article events from tens of thousands of outlets in over a hundred languages. Overwatch queries it on a five-minute cadence, gazetteer-matches title text to known conflict-zone cities, and falls back to source-country centroids when the article is regional. Article-level metadata — title, source, tone, language, publication time — is preserved through to the inspect panel.
Bluesky rides the AT Proto firehose with an app-password identity. Posts mentioning monitored locations or actors are pulled, geotagged where the protocol exposes it, and reduced to point velocity on the globe. Token state is cached in Redis under a fifty-minute TTL so the credential is decrypted exactly as often as it needs to be.
Mastodon federation is handled through OAuth client-credentials. Overwatch lazy-registers an app on the configured instance the first time the layer is queried, then caches the app credentials and access token indefinitely. Public timeline search across the fediverse is then a single signed request, deduplicated against Bluesky and GDELT before rendering.
Telegram rounds the layer out. A curated list of monitored channels — managed by org admins through the API Keys interface, never .env — is pulled on the same five-minute cadence, with audit functions surfacing membership changes, post velocity, and channel-health signals. The four sources are fused into a single heatmap point cloud, capped at eight hundred points per refresh, and drawn next to ACLED, FIRMS, and displacement on the same canvas.
Missing credentials for any one source — the layer still works. GDELT alone is enough to be useful; every additional feed makes the picture denser.
The globe renders to a single composite canvas, which means every pixel can be transformed by a final post-processing pass. Overwatch ships five of them — three operational, two for briefings. Each is one keystroke away.
Overwatch is in early operational use with a small set of partner organizations. If your team is running response, monitoring deployed people in fragile regions, or doing analytical work that deserves better than a tab full of bookmarks — talk to us.