DeepSeek 2025
A publicly accessible database belonging to the AI company leaked more than a million log lines, including chat history and secret keys.
Wiz Research
AI systems act at machine speed. Control what they can reach.
AI services connect to data platforms, operational systems and external model providers, often through routes that stay open between jobs. Control adds physical boundaries to selected paths, subject to governance, platform dependencies and the operational assessment of what an AI system may reach.
Incident
Path exposed
Outcome
Control taken
Approximately 120–150 ms
Management enable/disable operation
Around 2–3 seconds
SMS round-trip operation, good signal
March 2025 test observations, not guaranteed timings.
Data routes
Agent reach
Platform dependencies
Governance
01 · Recent incidents
What has already happened in AI.
Three published incidents that show how connections carried disruption into the service. These are attributed reports, not claims that Control would have prevented them.
Samsung 2023
Engineers pasted confidential source code and meeting notes into a public AI chat service. The company then banned generative AI tools on company devices.
The Korea HeraldMicrosoft AI researchers 2023
An over-permissive storage link used to publish AI training data exposed 38 terabytes of internal data, including backups and internal messages.
Microsoft MSRC02 · About our Blueprint
Control for AI, in brief.
Model services, agents and automation pipelines hold connections into data and operations that persist whether or not they are needed. A standing route can move prompts, records or instructions without a person watching the path.
An AI platform needs a scheduled data or support connection while approved business services continue. Control acts on selected physical connections, not every connection in the environment.
What it never touches: Reference design for adaptation with the service owner, not a validated deployment. Confirm complete boundary coverage, operational dependencies and the consequences of opening or closing each selected path.
Data routes
Training and inference paths move records into and out of AI platforms. Understand what each route carries before any change.
Agent reach
Automated agents may hold tool and system access. Review which operations they can trigger and who approves them.
Platform dependencies
Compute, vector stores and model APIs share infrastructure. Assess what a boundary change does to each dependency.
Governance
Service owners need agreed authority, records and evidence for connection decisions affecting AI systems.
03 · The Blueprint
Choose what to control.
An AI platform needs a scheduled data or support connection while approved business services continue. Review the named support and cross-zone boundaries; operationally required links are not assumed disconnectable.
What do you want to take control of?
Without Control: path exposed
Cyber control · An incident is spreading
An incident starts on the internet-facing side and heads for operations. Fracture physically breaks the selected path so the activity cannot travel along it.
How Cyber Control works
FractureWhen an incident threatens to spread between connected systems, Fracture provides physical disconnection of a selected network path under an agreed response process.
Illustrative map, not a site design or wiring diagram. The module shown is the suggested starting point for each environment; your Blueprint is drawn from your own sites in discovery, with process and safety dependencies assessed first.
04 · Suggested next steps
Start with one route. Prove it. Then expand.
Every Blueprint starts with a discovery session with Firevault and the people who own the service.
- 1
Book a discovery session
Operations, engineering and security join Firevault to talk through your sites and the routes into them.
- 2
Map your crossings
Together we list every connection into operations, who owns it and what must keep running.
- 3
Choose the first route
Pick one route to control, the module that suits it and the checks that prove it works.
Your discovery session
You will leave with a map of the routes into your AI operations, the first one to control and a test plan agreed with your team.