--- title: "Secure Defence Network Path Control | Control" description: "Achieve total command over classified data paths in defence networks, enforcing physical separation between systems of different security levels. Discover." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/control-for-defence#webpage", "url": "https://fire-vault.com/control-for-defence", "name": "Secure Defence Network Path Control", "description": "Achieve total command over classified data paths in defence networks, enforcing physical separation between systems of different security levels. Discover.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/control-for-defence#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/control-for-defence#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Secure Defence Network Path Control", "item": "https://fire-vault.com/control-for-defence" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Defence # National Security-Grade Network Severance and Isolation Defence networks carry the most sensitive information a nation possesses. The threat landscape includes the most capable adversaries on earth, operating with state-level resources and persistence. - Nation-state APTs - Cross-domain data leakage - Insider threat - Supply-chain implants Schedule a Demo[Back to Control](/solutions/control) ![Defence operations centre with situational awareness displays](/assets/sector-square-defence-BuFAbR-h.jpg) Exposure How it worksExplore moreQuestions The exposure in numbers 01 Classification boundary enforcement 100% Classification boundary enforcement 02 Cross-domain network reachability Zero Cross-domain network reachability 03 Cleared personnel at every facility SC/DV Cleared personnel at every facility 04 JSP 440 and NATO security compliance Full JSP 440 and NATO security compliance The Challenge ## Defence networks face state-level adversaries. 01 ### Nation-State Persistence State-sponsored actors maintain persistent access campaigns against defence networks, investing years of effort to compromise a single classified system. 02 ### Cross-Domain Risks Information sharing between classification levels creates network paths that, if compromised, could allow classified data to traverse to lower classification domains. 03 ### Legacy Military Systems Decades-old military systems were designed for physical isolation but are increasingly connected to modern networks for interoperability. Defence > Defence information requires defence-grade protection. Logical separation managed by software is not sufficient when the adversary has the resources and patience to find and exploit every configuration error. The Scenario ### Scenario: Cross-Domain Boundary Compromise A state-sponsored group identifies a misconfiguration in a cross-domain solution connecting SECRET and OFFICIAL networks. The misconfiguration allows carefully crafted data packets to bypass content inspection, creating a covert channel for exfiltrating classified material. The channel operates for months at low bandwidth, evading detection systems tuned for bulk data movement. With Control, cross-domain boundaries are physically enforced. Data movement between classification levels requires multi-party authorisation with full content verification. The covert channel cannot exist because the physical path between domains does not exist outside authorised transfer windows. "Our cross-domain solution had been certified and accredited. It passed every penetration test. But the misconfiguration that enabled the covert channel was in a feature that had been added after certification. The accreditation process had not caught up." Module deployment · defence network ## Where each Control module is deployed across admin, mission and classified domains. Defence estates separate admin networks from mission systems and classified enclaves. Control puts a boundary between each domain so the right things stay reachable and the wrong things do not. Sovereign data lives behind its own firebreak. Grounded in MOD Secure by Design, NCSC for defence, NIST SP 800-171 and JSP guidance available in the public domain. D0 Internet / Cloud External External services Cloud ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate External traffic stops at the admin perimeter. D1 Admin network Admin Office IT Email SOC Day-to-day business systems. Day-to-day business systems. ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Admin cannot reach mission directly. DMZ Cross-domain DMZ DMZ · trust boundary Guard Data diode One-way and brokered exchange between domains. One-way and brokered exchange between domains. ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer Cross-domain movement is checked and routed. D2 Mission planning Mission Planning systems Logistics ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Mission actions approved before they move. D3 Mission execution Mission Command & control ISR feeds Operational tempo, not office hours. Operational tempo, not office hours. ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Classified access is named with the right clearance. D4 Classified enclave Mission Sovereign workloads Sensitive data Sovereign and sensitive systems. Sovereign and sensitive systems. OSS Crown jewels Off-network Detail callout · A Offline Secure Storage Sovereign records, sensitive data, evidence and the recovery sets needed to survive a worst day. Offline by design · secure by default Modules & symbols ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png)Firebreak Physical sever ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png)Validate Integrity check ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png)Isolate Zone boundary ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png)Transfer Controlled move ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png)Execute Approved action ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png)Lock Named access DMZ boundary Trust transition OSS callout Off-network detail ### Where each module is deployed, and what it does there. One row per module. Placement on the network, then plain-English purpose at that point. 1. ![FV-Isolate module icon](/assets/isolate-icon-B9t8fl3o.png) Isolate On the D1 to DMZ link and the D3 to D4 link Admin, mission and classified each sit on their own physical fabrics. A compromise in admin cannot walk into mission or classified. 2. ![FV-Firebreak module icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak On the D0 to D1 link and the D1 to DMZ link Real hardware off switches on the public and admin boundaries, cutting the live path into mission and classified estates. 3. ![FV-Validate module icon](/assets/vault-icon-CD3Pv4ri.png) Validate On the D0 to D1 link and inside the cross-domain DMZ Requests crossing into trusted estates are checked for origin, integrity and authority before they reach an operational system. 4. ![FV-Transfer module icon](/assets/transfer-icon-DqGa0PQI.png) Transfer Inside the cross-domain DMZ Movement between domains is brokered, often one-way. Transfer governs the route and the landing point. 5. ![FV-Execute module icon](/assets/execute-icon-kJl5Gtmk.png) Execute On the D2 to D3 link Mission actions hold until the right approval is in place. 6. ![FV-Lock module icon](/assets/lock-icon-UU3vOaKE.png) Lock On the D3 to D4 link Classified access ties to named individuals with the right clearance, device and authority. Featured In [![TechRadar Pro logo](/press/techradar-pro-logo.svg) ](https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough "Read about Firevault on TechRadar Pro") [![Yahoo Finance logo](/assets/yahoo-finance-logo-white-aNkUpCH7.png) ](https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html "Read about Firevault on Yahoo Finance") [![Channel Insider logo](/assets/channel-insider-logo-white-CFFo4iu7.png) ](https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/ "Read about Firevault on Channel Insider") [![Security Buyer logo](/assets/security-buyer-logo-white-o6oIaBWz.png) ](https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/ "Read about Firevault on Security Buyer") [![SecurityBrief logo](data:image/png;base64,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) ](https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks "Read about Firevault on SecurityBrief") Capabilities ## What you get with every deployment 01 ### UK Sovereign Facilities All classified data remains within NATO-approved underground facilities in the United Kingdom, managed by SC/DV-cleared personnel under MOD oversight. 02 ### Cleared Multi-Party Access All access requires authorisation from multiple cleared individuals across different roles, preventing any single point of compromise. 03 ### JSP 440 Compliance Automated compliance logging maps directly to JSP 440, JSP 604, and NATO security requirements with continuous evidence generation. 04 ### Independent Communications Out-of-band management via dedicated, secured communications ensures control plane access independent of primary defence networks. 05 ### Forensic-Grade Logging Every access, transfer, and authorisation decision is recorded in tamper-proof, classification-appropriate logs on physically separate infrastructure. 06 ### Cleared Recovery Capability Verified control-plane baselines maintained within appropriately cleared facilities ensure classified system restoration during total compromise scenarios. Demo to Live ## Adoption Guide Step 1 #### Classification Boundary Assessment Map all cross-domain connections and data flows between classification levels, identifying persistent paths and reachability gaps against JSP 440 requirements. Step 2 #### Sovereign Architecture Design Design physically separated classification zones with Control modules enforcing each boundary, aligned to MOD and NATO security requirements. Step 3 #### Accredited Pilot Deploy within a controlled environment with full classification boundary enforcement, multi-party authorisation, and forensic logging for accreditation evaluation. Step 4 #### Operational Capability Full deployment across defence infrastructure with cleared verified baselines, continuous compliance evidence, and independent communications. Step 1 #### Classification Boundary Assessment Map all cross-domain connections and data flows between classification levels, identifying persistent paths and reachability gaps against JSP 440 requirements. Step 2 #### Sovereign Architecture Design Design physically separated classification zones with Control modules enforcing each boundary, aligned to MOD and NATO security requirements. Step 3 #### Accredited Pilot Deploy within a controlled environment with full classification boundary enforcement, multi-party authorisation, and forensic logging for accreditation evaluation. Step 4 #### Operational Capability Full deployment across defence infrastructure with cleared verified baselines, continuous compliance evidence, and independent communications. [Organise a Demo](/contact) Relevant Control Blueprints ## Deployment patterns that apply here [ CP-04 FIRE ### Enforce Physical Segmentation Segmentation should not just be logical. It should be physically enforceable. View blueprint ](/control-blueprints/cp-04)[ CP-01 FIRE ### Stop Kill-Chain Ransomware Stop ransomware moving, spreading or reaching the crown jewels. View blueprint ](/control-blueprints/cp-01)[ CP-02 FIRE ### Contain Active Breaches When prevention fails, containment must be physical, immediate and provable. View blueprint ](/control-blueprints/cp-02)[ CP-05 FIRE+VAULT ### Protect Critical Infrastructure Keep critical systems available, controlled and disconnected from unnecessary exposure. View blueprint ](/control-blueprints/cp-05) ## Explore More [ ### Control for Critical Infrastructure National-grade security for essential services. Learn more about Control for Critical Infrastructure ](/control-for-critical-infrastructure)[ ### Control for Public Sector Government network isolation and classified data paths. Learn more about Control for Public Sector ](/control-for-public-sector) Questions ## Frequently Asked What clearance levels are supported at Firevault facilities? How does Control integrate with existing MOD networks? Can Control support coalition operations? How is supply chain security maintained for Control hardware? Defence blueprint - PoC ### Speak to the team to organise a PoC Walk through your blueprint with the Firevault team and scope a proof of concept on your estate. 30 minutes, no sales pitch. Book a PoC conversation