Technical Guides How It Works
How the architecture and the controls actually work. Each guide sets out the mechanism, the design decisions, the dependencies that break under attack and the limits worth stating plainly, before it covers where Firevault fits.
Architecture, boundary by boundary
These guides answer a mechanical question rather than a governance one. How does the control operate, what does it depend on, what happens to it when an attacker holds valid administrative credentials, and what does the design leave residual.
Zero Trust Architecture
What NIST SP 800-207 actually requires: the seven tenets, the policy engine, administrator and enforcement point, the four deployment approaches, and the three places Zero Trust reaches its limits.
Read the guideBackup and Recovery Architecture
3-2-1 and 3-2-1-1-0 stated precisely, how immutability is actually enforced, why immutable and offline are not synonyms, and how to design a recovery path that survives privileged compromise.
Read the guideThe Purdue Model
Levels 0 to 5 boundary by boundary, how Purdue relates to IEC 62443, NIST SP 800-82 and the NCSC CAF, and the architectural question each boundary has to answer.
Read the guideOT Network Segmentation
Zones, conduits and enforcement in environments where devices cannot authenticate, cannot run an agent and cannot tolerate inline latency.
Read the guidePurdue Model Diagram
The reference diagram, with each level, the traffic that legitimately crosses it, and the controls that belong at the boundary.
Read the guideNIST SP 1339 and OT Backup
What the OT backup guidance asks for, and how to evidence recovery capability for control system configuration and process data.
Read the guideThe other two guide families
Role guides cover who is making the decision and what evidence that seat should expect. Standards and framework guides cover what a recognised standard requires and where Firevault can contribute to meeting it.
Which offline secure storage solution is right for you?
Answer a few quick questions and we will recommend the right solution, whether that is a personal vault or a scalable offline storage system built for your needs.
Takes about 2 minutes. No account needed.