Products · Flying Fox® Enterprise
Flying Fox® Enterprise
Distributed, installed, and supported in the U.S. by CyNtell
Flying Fox® Enterprise: Wireless Intrusion Detection for SCIFs and Classified Spaces
Flying Fox® Enterprise is a passive wireless intrusion detection system (WIDS) that finds, geolocates, and logs every unauthorized Wi-Fi®, Bluetooth®, and cellular device inside a sensitive compartmented information facility (SCIF) or other secure space. CyNtell is the exclusive U.S. distributor and handles installation, tuning, and operator training for every deployment.
See Flying Fox® in your facility
Tell us about your space and a CyNtell consultant will follow up. No proposal obligation to schedule a call.
What is a wireless intrusion detection system?
A wireless intrusion detection system (WIDS) is a set of sensors that continuously monitor the radio spectrum inside a facility and alert on any unauthorized Wi-Fi®, Bluetooth®, or cellular device operating there. A WIDS watches the air rather than the network, so it sees devices that never join a corporate network at all, which is exactly the category a secure facility cares about.
Wireless intrusion detection systems divide into two kinds. An active system transmits its own signals to probe the environment, which makes it detectable and jammable and rules it out of many classified spaces. A passive system only receives. Flying Fox® Enterprise, the WIDS CyNtell deploys, is fully passive: it never radiates, so it cannot be located by the devices it is watching for.
A WIDS is also distinct from the wireless controls built into an enterprise Wi-Fi® platform. Those tools secure the network a facility runs. A WIDS covers everything else in the air, a personal phone in a pocket, a smartwatch, a Bluetooth®-enabled television, a concealed transmitter, none of which touches the facility network and none of which a network tool will ever report.
The difference that matters
A network security tool only sees devices that join the network. A WIDS sees the ones that never do, which is the whole exposure inside a SCIF.
Flying Fox® Enterprise at a glance
- Category
- Passive wireless intrusion detection system (WIDS) and TSCM platform
- Also called
- Rogue device detection, cell phone detection, PED detection, RF monitoring, no-wireless policy enforcement
- Manufacturer
- Epiq Solutions (Sidekiq™ software-defined radio technology)
- CyNtell's role
- Exclusive U.S. distributor, installer, and training provider
- Signals detected
- Wi-Fi®, Bluetooth®, and cellular transmissions
- Detection method
- Fully passive; sensors receive only and emit no RF signal of their own
- Typical environments
- SCIFs, secure conference rooms, network operations centers, controlled entry points, campuses, mobile command posts
- Deployment options
- Fixed ceiling-mounted sensors or a portable fly-away kit
- Compliance drivers
- DoDD 8100.02, AR 380-28, DHS MD 11021 (portable electronic device policy)
- Platform integration
- SIEM and SOAR platforms, via software-upgradable sensors
- Acquisition
- Available through CyNtell's GSA Schedule; CyNtell also holds SBA 8(a) and HUBZone status
Field results drawn from Epiq Solutions case studies.
What does Flying Fox® Enterprise actually detect?
Flying Fox® Enterprise detects, identifies, and geolocates unauthorized Wi-Fi®, Bluetooth®, and cellular devices operating inside a facility (phones, smartwatches, and hidden transmitters carried past a screening point) by combining wireless intrusion detection (WIDS) with technical surveillance countermeasures (TSCM).
Every Flying Fox® sensor runs AI/ML-driven signal analysis to classify what it hears in real time, then logs and geolocates it against a geofence the facility defines around a SCIF, a conference room, or an entire building. Because detection is fully passive, Flying Fox® never transmits a signal of its own and cannot be located or jammed the way an active scanner can.
TSCM
Surfaces covert emitters and unauthorized surveillance devices, not just consumer electronics.
Real-time forensics
Live monitoring with location tracking and historical logs for incident investigation.
Geo-fencing and allowlists
Define critical-area boundaries and trusted devices that shouldn't trigger an alert.
AI/ML signal analysis
Machine-learning classification is what keeps ordinary equipment from setting off false alarms.
How do you enforce a no-wireless policy in a SCIF?
Enforcing a no-wireless policy takes three layers: a written portable electronic device (PED) policy, screening and lockboxes at the entry point, and continuous detection inside the space. CyNtell deploys Flying Fox® Enterprise as the third layer, the one that catches what screening misses and produces a logged record that the space stayed clean.
Layer 01
Written PED policy
The portable electronic device rule on paper: what is barred from the space, and who is accountable for enforcing it.
Layer 02
Screening and lockboxes
At the entry point: handles the devices a person declares or a screener finds on the way in.
Layer 03
Continuous passive detection
Inside the space: catches what screening misses and produces a logged record that the space stayed clean.
Flying Fox® EnterpriseEntry screening and lockboxes handle the devices people declare. The exposure is the device nobody declared: a phone forgotten in a jacket, a fitness tracker on a wrist, a contractor's tablet, a piece of equipment with a Bluetooth® radio that nobody knew was a radio. A SCIF that relies on screening alone has no way to find any of them.
Manual radio frequency (RF) sweeps were the traditional answer, and they are point-in-time by nature: a sweep tells a facility what was transmitting during the sweep and nothing about the eleven hours before it or the thirteen after. Continuous passive detection replaces that snapshot with a running record, and because every alert carries a location and a timestamp, a security team can correlate it against badge-swipe logs and determine who was where.
How does Flying Fox® compare to other wireless detection approaches?
Most facilities already run one or more of four approaches: entry screening, manual RF sweeps, a Wi-Fi-only scanner, or a broadband RF emission detector. Each covers part of the problem. Flying Fox® Enterprise is the only one of the five that is continuous, multi-band, geolocating, and passive at the same time.
Table 1. Wireless detection approaches used in secure facilities
| Approach | What it covers | Coverage pattern | Where it falls short |
|---|---|---|---|
| Entry screening and lockboxes | Devices a person declares or that a screener finds | At the door, per entry | Nothing undeclared, forgotten, or concealed; no visibility once inside |
| Manual RF sweeps | Whatever is transmitting while the sweep runs | Point-in-time, scheduled | Blind between sweeps; labor-intensive; no continuous evidence trail |
| Wi-Fi-only scanner | Wi-Fi® traffic only | Continuous, single band | Misses Bluetooth® and cellular entirely, including phones on a mobile network |
| Broadband RF emission detector | Any source of RF energy | Continuous, no classification | Alarms on microwaves and ordinary equipment; false alarms erode operator trust |
| Flying Fox® Enterprise (passive WIDS and TSCM) | Wi-Fi®, Bluetooth®, and cellular devices, classified and geolocated | Continuous, multi-band, with location and logs | Detects transmissions; a device emitting nothing produces no signal, so screening controls remain necessary |
Flying Fox® Enterprise combines the coverage of the first four approaches with continuous, passive, geolocated detection across all three bands.
How does Flying Fox® avoid the false alarms other systems generate?
Older RF emission detectors alarm on anything that radiates, including microwaves and other office equipment, while Flying Fox® Enterprise's signal classification tells a real Wi-Fi®, Bluetooth®, or cellular device apart from ordinary electrical noise.
At one Department of War (DoW) installation, the legacy detector's false alarms had trained security staff to stop trusting it. After Epiq Solutions replaced it with Flying Fox® Enterprise, the new deployment ran with zero false positives on commercial wireless signals while using 30% fewer sensors than the system it replaced, and its first sweep turned up devices the old system had missed entirely, including Bluetooth®-enabled televisions.
False alarms are not a nuisance problem in a secure facility; they are a security problem. A detector that cries wolf gets ignored, and an ignored detector is functionally the same as no detector at all. Classification accuracy is what keeps the system in use.
At one DoW installation
false positives on commercial wireless signals after the switch
fewer sensors than the legacy system it replaced
Source: Epiq Solutions case study.
Which compliance requirements does Flying Fox® support?
Flying Fox® Enterprise gives a facility continuous, logged evidence of wireless activity in restricted areas, supporting portable electronic device (PED) policies under DoDD 8100.02, AR 380-28, and DHS MD 11021.
DoDD 8100.02
Governs commercial wireless devices, services, and technologies in DoW information systems.
AR 380-28
Sets Department of the Army special security system requirements.
DHS MD 11021
Covers portable electronic devices inside SCIFs.
A control, not a certification
Flying Fox® Enterprise is a physical and RF security control, not a CMMC or NIST SP 800-171 assessment tool. If a facility also needs to demonstrate controlled unclassified information (CUI) safeguarding under those frameworks, CyNtell's cybersecurity gap assessment and CMMC C3PAO assessment teams handle that separately, and CyNtell will say plainly which of the two a given requirement actually falls under rather than letting a product stand in for an assessment.
The practical value in an inspection is the log. A PED policy that exists only on paper is difficult to evidence; a continuous record of wireless activity inside the geofence, with timestamps and locations, is the artifact an inspector can actually examine.
What does a CyNtell Flying Fox® deployment include?
CyNtell scopes, installs, tunes, and trains. A deployment starts with an RF survey of the actual building, because sensor placement depends on construction, and ends with the facility's own security team running the system day to day rather than depending on an outside vendor for routine monitoring.
- Site assessment and RF propagation survey of each building in scope
- Sensor placement plan calibrated to construction, not a generic template
- Installation, reusing existing cabling where the building allows it
- Geofence definition around SCIFs, entry traps, and critical areas
- Allowlist configuration so authorized equipment does not generate noise
- Integration with the facility's SIEM or SOAR platform for alert routing
- Operator training for the security staff who will run it daily
- Fly-away kit option for temporary sites and short-notice visits
Can Flying Fox® scale from a single SCIF to an entire campus?
Yes. Flying Fox® Enterprise scales to a building's size with fixed ceiling-mounted sensors, and a portable fly-away kit covers temporary sites, mobile command posts, and short-notice visits without a permanent install.
Epiq Solutions has fitted the same sensor line across a legacy iron structure, a modern concrete-and-glass building, and mobile trailers on a single campus, calibrating each for its own construction and signal propagation rather than shipping one generic configuration everywhere. Building materials change how RF behaves, and a sensor count that works in glass and drywall will not work in iron.
Proven in federal facilities
to first confirmed catch
DoW joint base · proof of concept
A joint base needed 24/7 AR 380-28 coverage around its network operations center (NOC) and secured entry point. Manual sweeps left gaps, and the emission-based detector it replaced kept false-alarming on microwaves. Epiq Solutions installed ceiling-mounted Flying Fox® sensors with a geofence around the NOC and entry trap. Within a 48-hour trial, the system flagged a Bluetooth®- and Wi-Fi®-enabled device entering at 0100 hours and tracked it from entry through the NOC to exit, letting the team cross-reference the alert against badge-swipe logs. The site's information system security officer (ISSO) called it quick and easy to set up.
Source: Epiq Solutions case study.
fewer sensors than the legacy system
Multi-building DoW installation
A campus spanning a legacy iron building, a modern concrete-and-glass building, and mobile trailers ran a Wi-Fi-only detector that missed Bluetooth® and cellular devices and had grown so unreliable that staff stopped trusting its alerts. External device lockboxes also threw off its location estimates. Epiq Solutions assessed each building's construction and signal propagation, isolated the lockboxes from location scoring, and reused existing cabling to control cost. The result: full coverage across all three bands with 30% fewer sensors and zero false positives on ordinary commercial signals, and the first sweep surfaced devices the old system never saw, including Bluetooth®-enabled televisions.
Source: Epiq Solutions case study.
Who relies on Flying Fox® Enterprise
Agencies listed per Flying Fox® Enterprise's published materials (flyingfoxenterprise.com).
Why deploy Flying Fox® Enterprise through CyNtell?
Exclusive U.S. distributor
CyNtell has deployed hundreds of Flying Fox® sensors across government facilities as the exclusive U.S. provider of installation, optimization, and training.
Federal contract vehicles
CyNtell holds a GSA Schedule contract plus SBA 8(a) and HUBZone certifications, so agencies can typically acquire Flying Fox® without a new open-market procurement.
One team, end to end
The same CyNtell team that installs and tunes your sensors also trains your staff to run Flying Fox® day to day.
Security firm, not a reseller
CyNtell is a cybersecurity company and an Authorized C3PAO, so a Flying Fox® deployment is scoped against the facility's wider security posture rather than sold as a standalone box.
Cleared federal experience
CyNtell works in federal and defense environments daily and writes scopes, schedules, and site access plans that survive a facility security officer's review.
National capital region
CyNtell is based in the national capital region, within reach of the federal facilities where most SCIF deployments happen, and travels to sites nationwide.
Flying Fox® Enterprise: frequently asked questions
What is Flying Fox® Enterprise?
Flying Fox® Enterprise is a passive wireless intrusion detection system, manufactured by Epiq Solutions and deployed by CyNtell, that detects, identifies, and geolocates unauthorized Wi-Fi®, Bluetooth®, and cellular transmissions inside a facility. It combines wireless intrusion detection (WIDS) with technical surveillance countermeasures (TSCM) and emits no RF signal of its own.
What is a SCIF?
A SCIF is a sensitive compartmented information facility, an accredited room or building where classified information may be discussed, processed, and stored. SCIF accreditation carries strict limits on portable electronic devices, which is why a SCIF needs a way to confirm continuously that no unauthorized transmitter is operating inside it.
What is TSCM?
TSCM stands for technical surveillance countermeasures: the practice of finding covert listening devices, hidden cameras, and unauthorized transmitters in a protected space. Traditional TSCM is a periodic manual inspection. Flying Fox® Enterprise adds a continuous, automated layer that runs between those inspections rather than replacing them.
How is Flying Fox® different from a standard Wi-Fi scanner?
A standard Wi-Fi scanner only reads Wi-Fi® traffic and needs someone to run a manual sweep. Flying Fox® Enterprise runs continuously, covers Wi-Fi®, Bluetooth®, and cellular bands at once, and uses AI/ML-driven signal analysis to geolocate a device rather than just flag that one exists somewhere in range.
Can Flying Fox® detect a device that is not transmitting?
No, and no passive detection system can. Flying Fox® Enterprise identifies devices by the signals they emit, so a device that is fully powered off produces nothing to detect. This is why CyNtell positions Flying Fox® as the continuous layer alongside entry screening and lockboxes rather than as a replacement for them.
Does Flying Fox® require an internet connection or emit a signal?
No. Flying Fox® Enterprise listens for transmissions without emitting RF energy of its own, so it cannot be located or jammed the way an active scanner can. Sensors can run on an isolated network and still forward alerts to a facility's SIEM or SOAR platform.
What is the difference between the fixed sensors and the fly-away kit?
Fixed Flying Fox® sensors mount in the ceiling of a permanent facility, such as a SCIF, and scale to the size of the building. The fly-away kit is a portable, self-contained version of the same detection technology, built for temporary locations, mobile command posts, or short-notice site visits.
Which compliance requirements does Flying Fox® support?
Flying Fox® Enterprise supports portable electronic device policies under DoDD 8100.02, AR 380-28, and DHS MD 11021 by giving a facility continuous, logged evidence of wireless activity in restricted areas. It does not itself certify compliance with CMMC or NIST SP 800-171, which cover a separate set of controls.
Can CyNtell train our staff to operate Flying Fox® after installation?
Yes. CyNtell is the exclusive distributor for Flying Fox® Enterprise and provides installation, optimization, and operator training as part of every deployment, so a facility's own security team runs the system day to day instead of depending on an outside vendor for routine monitoring.
Is Flying Fox® available through a federal contract vehicle?
CyNtell holds a GSA Schedule contract along with SBA 8(a) and HUBZone certifications, so a federal buyer can typically acquire Flying Fox® Enterprise and its installation through an existing contract vehicle rather than running a new open-market procurement. Ask a CyNtell consultant which vehicle fits your agency.
How quickly can Flying Fox® show results after installation?
In one Epiq Solutions case study, Flying Fox® identified an unauthorized Bluetooth®- and Wi-Fi®-enabled device within a 48-hour proof-of-concept trial at a DoW joint base, tracking it from entry to exit. Actual timelines vary with facility size and construction, but a short pilot is typically enough to show value.
How much does a Flying Fox® Enterprise deployment cost?
Cost depends on the number of buildings, the square footage inside each geofence, and building construction, since RF propagation determines how many sensors a space needs. CyNtell scopes each deployment from an RF survey rather than a per-seat list price. Schedule a call to get a scoped estimate for your facility.
See Flying Fox® running in your own facility
CyNtell scopes, installs, and trains your team on Flying Fox® Enterprise. No proposal obligation to schedule a call.
References
- Flying Fox® Enterprise product materials, flyingfoxenterprise.com.
- Epiq Solutions case study, DoW joint base proof of concept.
- Epiq Solutions case study, enforcing a no-wireless policy at a complex DoW installation.
- DoDD 8100.02, Use of Commercial Wireless Devices, Services, and Technologies in the DoW Global Information Grid.
- AR 380-28, Department of the Army Special Security System.
- DHS MD 11021, Portable Electronic Devices in SCIFs.
Page reviewed September 2026. CyNtell updates this page when the product's capabilities or the underlying policies change.