---
title: "Control Modules: the nine FIRE and VAULT modules | Control…"
url: https://fire-vault.com/control-modules
description: "The nine modules of Control by Firevault, grouped into FIRE and VAULT families, and how they combine into Control Plans and Blueprints."
lang: en-GB
---

Firevault home: Offline Secure Storage and Control: https://fire-vault.com/

Control Modules

# Nine modules. Two families.

Every Control Plan and Control Blueprint is built from the same nine modules. FIRE modules act on the network path; VAULT modules govern the assets behind it.

How we got here

## We started by taking one copy of your data offline. Then we did the same for connections.

Offline Secure Storage® keeps an important copy of your data physically disconnected, so an attacker on your network cannot reach it. Customers kept asking the same question: what about the systems that cannot simply go offline?

Control by Firevault is the answer. Instead of disconnecting everything, it controls each connection into your critical systems: on for approved work, off when it is not needed, and cut when something goes wrong. We broke that down into three layers.

1. Step 1 · You are here Modules Nine building blocks. Each does one job, such as opening a connection for a set time or physically cutting it. Relay opens a supplier route for the approved job only.: https://fire-vault.com/control-modules
2. Step 2 Plans Modules combined to answer one risk you recognise, such as ransomware or supplier access. CP-03 uses Relay, Validate and Execute to close supplier access when the job ends.: https://fire-vault.com/control-plans
3. Step 3 Blueprints The Plans an industry needs, applied to the systems that industry actually runs. BP-01 Water applies the right Plans to treatment sites, pumping stations and telemetry.: https://fire-vault.com/control-blueprints

Offline Secure Storage® stays a separate product: Control manages connections, OSS® protects stored copies.

Why it matters to you

## Every connection you cannot switch off is one you have to trust.

### Your network has more ways in than you think

Supplier links, remote support, cloud services and connected equipment. Most stay on all the time.

### Software can be talked round

Passwords, firewall rules and permissions all stay in place while a connection exists. A stolen login can still use them.

### A physical gap cannot

When a module removes the connection, there is no route left to misuse. That is the one thing every module builds on.

## FIRE modules act on the path

Opening, closing and cutting connections.

FV-Fracture Physically disconnects network paths to prevent unauthorised access, contain threats and stop an attack from progressing.: https://fire-vault.com/control-module/fracture
FV-Isolate Separates networks and critical systems into controlled zones, limiting exposure and preventing threats from moving freely between them.: https://fire-vault.com/control-module/isolate
FV-Relay Establishes connectivity only when authorised, for a defined purpose and a limited time, before removing the network path again.: https://fire-vault.com/control-module/relay
FV-Execute Activates defined control actions in response to approved commands, security events, scheduled operations or emergency intervention.: https://fire-vault.com/control-module/execute

## VAULT modules govern what sits behind it

Identity, authority, boundaries and protected assets.

FV-Validate Verifies identity, authority and purpose before access, actions or the movement of protected assets are permitted.: https://fire-vault.com/control-module/validate
FV-Anchor Keep critical assets within defined physical connection boundaries.: https://fire-vault.com/control-module/anchor
FV-Unlink Removes persistent connections and dependencies that leave critical data and valuable assets unnecessarily exposed.: https://fire-vault.com/control-module/unlink
FV-Lock Restricts access to protected assets through defined identities, permissions and policies, preventing unauthorised use or modification.: https://fire-vault.com/control-module/lock
FV-Transfer Controls the movement of sensitive data and digital assets between environments through authorised, governed transfer paths.: https://fire-vault.com/control-module/transfer

## Fracture is the module. Firebreak® is the hardware.

Fracture is the Control module that physically cuts a path. Firebreak® is the hardware switch, supplied by Firevault within Control, that carries out the cut. Applied to AI systems, it is the AI Kill Switch.

See the Firebreak® hardware: https://fire-vault.com/firebreak
Explore the AI Kill Switch: https://fire-vault.com/ai-kill-switch

## Talk to us about your estate

We map the paths into your critical systems and show you which Plan or Blueprint fits.

Book a briefing (https://fire-vault.com/demo)

Firevault home (https://fire-vault.com/)

Offline Secure Storage® and Control.

A UK cyber resilience company. Data protection and storage through Offline Secure Storage®. Network evolution and rapid protection through Control.

Firevault on LinkedIn: https://www.linkedin.com/company/firevault-limited
Firevault on Facebook: https://www.facebook.com/Firevaultltd/
Firevault on YouTube: https://www.youtube.com/@Firevault-ltd

Verify Firevault Cyber Essentials and Cyber Essentials Plus certification on the NCSC register: https://registry.blockmarktech.com/certificates/

© 2026 Firevault Limited Company No. 16320803 VAT No. 490 8551 64 Registered in England and Wales

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://fire-vault.com/#organization",
    "name": "Firevault",
    "legalName": "Firevault Limited",
    "url": "https://fire-vault.com",
    "logo": {
      "@type": "ImageObject",
      "url": "https://fire-vault.com/logo.png",
      "width": 200,
      "height": 60
    },
    "foundingDate": "2025-03",
    "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.",
    "address": {
      "@type": "PostalAddress",
      "addressCountry": "GB",
      "addressLocality": "United Kingdom"
    },
    "contactPoint": [
      {
        "@type": "ContactPoint",
        "contactType": "customer service",
        "email": "hello@fire-vault.com",
        "availableLanguage": "English",
        "areaServed": [
          "GB",
          "EU",
          "US",
          "AE"
        ]
      },
      {
        "@type": "ContactPoint",
        "contactType": "sales",
        "email": "sales@fire-vault.com",
        "availableLanguage": "English",
        "areaServed": [
          "GB",
          "EU",
          "US",
          "AE"
        ]
      }
    ],
    "founder": [
      {
        "@type": "Person",
        "name": "Mark Fermor",
        "jobTitle": "Founder, CTO and CMO"
      },
      {
        "@type": "Person",
        "name": "David Bailey",
        "jobTitle": "Founder and CEO"
      }
    ],
    "areaServed": [
      "United Kingdom",
      "Europe",
      "United States",
      "Middle East"
    ],
    "sameAs": [
      "https://www.linkedin.com/company/firevault",
      "https://x.com/firevaultuk"
    ],
    "slogan": "Disconnect to Protect",
    "brand": [
      {
        "@type": "Brand",
        "name": "Offline Secure Storage"
      },
      {
        "@type": "Brand",
        "name": "Control by Firevault"
      },
      {
        "@type": "Brand",
        "name": "Firebreak"
      }
    ],
    "knowsAbout": [
      "Offline Secure Storage",
      "Physically disconnected data storage",
      "Physical Air Gap Data Protection",
      "Ransomware Protection",
      "Ransomware recovery",
      "3-2-1-1-0 backup rule",
      "AI kill switch",
      "Operational technology security",
      "Critical national infrastructure resilience",
      "Data Sovereignty",
      "GDPR Compliance",
      "NIS2 Compliance",
      "DORA Compliance",
      "NCSC Cyber Assessment Framework"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "WebSite",
    "@id": "https://fire-vault.com/#website",
    "name": "Firevault",
    "alternateName": [
      "Firevault",
      "Firevault UK",
      "Firevault Limited"
    ],
    "url": "https://fire-vault.com",
    "publisher": {
      "@id": "https://fire-vault.com/#organization"
    },
    "inLanguage": "en-GB",
    "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}"
      },
      "query-input": "required name=search_term_string"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "WebPage",
    "@id": "https://fire-vault.com/control-modules#webpage",
    "url": "https://fire-vault.com/control-modules",
    "name": "Control Modules: the nine FIRE and VAULT modules",
    "description": "The nine modules of Control by Firevault, grouped into FIRE and VAULT families, and how they combine into Control Plans and Blueprints.",
    "isPartOf": {
      "@id": "https://fire-vault.com/#website"
    },
    "about": {
      "@id": "https://fire-vault.com/#organization"
    },
    "primaryImageOfPage": {
      "@type": "ImageObject",
      "url": "https://fire-vault.com/images/og/og-base-platform.jpg"
    },
    "inLanguage": "en-GB",
    "breadcrumb": {
      "@id": "https://fire-vault.com/control-modules#breadcrumb"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "@id": "https://fire-vault.com/control-modules#breadcrumb",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://fire-vault.com"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "Control Modules: the nine FIRE and VAULT modules",
        "item": "https://fire-vault.com/control-modules"
      }
    ]
  }
]
```