Firevault, offline secure storage, physically disconnected from the internet
Pricing

Vault product iconUse case · Operational technology

Operational data, physically disconnected.

PLC programs, HMI projects, SCADA configurations and safety-case evidence held on hardware that is physically disconnected, so a line can be rebuilt after an incident.

  • ICS ransomware
  • Remote-access abuse to PLCs
  • Firmware supply-chain risk
  • Safety-system tampering

As featured in

  • TechRadar Pro logo
  • Yahoo Finance logo
  • Channel Insider logo
  • Security Buyer logo
  • SecurityBrief logo

The problem

Why the current setup leaves this data exposed.

Operational technology recovery fails when the only copies of PLC programs, HMI projects, SCADA configurations and engineering records sit on connected infrastructure. When IT ransomware bridges across to the OT estate, those engineering shares are encrypted alongside production. Without an intact master copy, plant teams struggle to prove the safety case is unchanged, to rebuild a line at speed, or to give regulators the evidence they need.

How it plays out

The scenario, and what
physical disconnection changes.

One realistic sequence of events, then the controls that break it. Switch between the two, or play it through.

Step 1 of 2

Without physical disconnection

A manufacturer is hit by ransomware on a Friday evening. The intrusion starts in IT, reaches the engineering jump host, and encrypts the shared drive holding PLC backups, HMI projects and SCADA configurations. The on-site NAS sits on the same network and is encrypted too.

By Monday the line is still down, the safety officer cannot evidence the last validated state of the controllers, and the insurer is asking for the document trail that no longer exists.

The records
On connected systems
Network path
Always there
Access
Whoever holds a credential

An illustrative scenario.

The outcome

A line you can restart, and a safety case you can evidence.

With golden images, engineering data and safety-case evidence held in Firevault Offline Secure Storage®, the restart can begin from a validated master copy, and the safety officer and insurer get the document trail they ask for.

  • Hardware

    The data sits on physical Firevault hardware, not a shared cloud tenancy.

  • Physically disconnected Offline Secure Storage: server, three drives and a padlock

    Disconnect

    Offline by default. There is no standing network path in or out of the vault.

  • Command

    Access opens on your instruction, with identity verified and every session logged.

  • Location

    Held in a Firevault Bunker. Firevault provisions the location.

Protect what matters. Control what moves.

Choose your Vault and check out in minutes. Dedicated hardware, identity-locked to you, physically disconnected when closed. From £360 a month including VAT. 36-month commitment. First payment at checkout.