--- title: "The Purdue Model: Everything You Need to Know | Firevault" description: "Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know#webpage", "url": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know", "name": "The Purdue Model: Everything You Need to Know", "description": "Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "The Purdue Model: Everything You Need to Know", "item": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "The Purdue Model: Everything You Need to Know", "description": "Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It…", "url": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know", "image": [ { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://fire-vault.com/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://fire-vault.com/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2025-07-09T20:55:38+00:00", "dateModified": "2026-08-11T21:29:24.285561+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know" }, "inLanguage": "en-GB", "articleSection": "Explainer", "wordCount": 765, "keywords": "Explainer, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It Matters for Industrial Security Known Weaknesses & Attack Paths Where Firevault Fits How CSPaaS Strengthens Purdue Framework & Compliance Alignment Frequently Asked Questions Firevault’s Verdict What Is the Purdue Model? The Purdue Enterprise Re", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2025 }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview ContentsWhat Is the Purdue Model?The 6 Levels of Purdue ArchitectureWhy It Matters for Industrial Se…Known Weaknesses & Attack PathsWhere Firevault FitsHow CSPaaS Strengthens PurdueFramework & Compliance Align…Frequently Asked QuestionsFirevault’s VerdictShareMore Resources [Knowledge Vault](/learn/knowledge)/ Explainer Explainer · 9 July 2025 # The Purdue Model: Everything You Need to Know Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It… ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Mark Fermor Director & Co-Founder, Firevault 4 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know&text=The%20Purdue%20Model%3A%20Everything%20You%20Need%20to%20Know%0A%0AUpdated%20July%202025%20%7C%20Estimated%20read%20time%3A%2010%20minutes%20%7C%20Published%20by%20Firevault%20Contents%20What%20Is%20the%20Purdue%20Model%3F%20The%206%20Levels%20of%20Purdue%20Architecture%20Why%20It%E2%80%A6)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know)[](mailto:?subject=The%20Purdue%20Model%3A%20Everything%20You%20Need%20to%20Know&body=Updated%20July%202025%20%7C%20Estimated%20read%20time%3A%2010%20minutes%20%7C%20Published%20by%20Firevault%20Contents%20What%20Is%20the%20Purdue%20Model%3F%20The%206%20Levels%20of%20Purdue%20Architecture%20Why%20It%E2%80%A6%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know) ![An industrial control system panel with layered status indicators in a clean facility](/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg) Explainer Article record **Explainer**Category **9 July 2025**Published **4 min read**Reading time **Mark Fermor**Written by An industrial control system panel with layered status indicators in a clean facility Why it matters ## What this means for organisations holding critical data Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It… In this analysis 1. 01 [Contents](#section-0) 2. 02 [What Is the Purdue Model?](#section-1) 3. 03 [The 6 Levels of Purdue Architecture](#section-2) 4. 04 [Why It Matters for Industrial Se…](#section-3) 5. 05 [Known Weaknesses & Attack Paths](#section-4) 6. 06 [Where Firevault Fits](#section-5) **On this page**[Contents](#section-0)[What Is the Purdue Model?](#section-1)[The 6 Levels of Purdue Architecture](#section-2)[Why It Matters for Industrial Se…](#section-3)[Known Weaknesses & Attack Paths](#section-4)[Where Firevault Fits](#section-5)[How CSPaaS Strengthens Purdue](#section-6)[Framework & Compliance Align…](#section-7)[Frequently Asked Questions](#section-8)[Firevault’s Verdict](#section-9) **Updated July 2025** | Estimated read time: 10 minutes | Published by Firevault ## Contents 1. [What Is the Purdue Model?](#what-is-purdue) 2. [The 6 Levels of Purdue Architecture](#six-layers) 3. [Why It Matters for Industrial Security](#why-it-matters) 4. [Known Weaknesses & Attack Paths](#purdue-vulnerabilities) 5. [Where Firevault Fits](#firevault-fit) 6. [How CSPaaS Strengthens Purdue](#cspaas) 7. [Framework & Compliance Alignment](#frameworks) 8. [Frequently Asked Questions](#faqs) 9. [Firevault’s Verdict](#verdict) ## What Is the Purdue Model? The **Purdue Enterprise Reference Architecture (PERA)**, often just called the Purdue Model, is a layered model for industrial control systems (ICS). It defines how information and control flow through enterprise and operational technology environments, from the boardroom to the sensor. Originally developed in the 1990s to separate enterprise IT from OT (Operational Technology), it’s still used today to model cybersecurity zones and enforce access restrictions between layers of industrial operations. ## The 6 Levels of Purdue Architecture Level Scope Description Level 5 Enterprise Corporate IT, cloud, email, ERP Level 4 Business Logistics Systems SCADA servers, MES, reporting dashboards Level 3 Site Operations Manufacturing execution, plant-level command Level 2 Cell/Area Zone Process control systems, HMI, PLC supervisory Level 1 Basic Control Programmable logic controllers (PLCs), RTUs Level 0 Process Physical sensors, actuators, field devices ## Why It Matters for Industrial Security The Purdue Model enforces a separation of duties between IT and OT. Each level is meant to have [controlled access](/news/controlled-access-buyers-guide-offline-secure-storage) to adjacent levels, enabling command flow down and data flow up. This matters because in most cyber incidents involving [critical infrastructure](/control-for-critical-infrastructure), attackers exploit: - Weak segmentation between levels (e.g., Level 3 to Level 1 jump) - Exposed SCADA systems at Level 4 - Remote access from Level 5 reaching into Level 2/1 without strict controls Ransomware, wiper malware, and remote access Trojans (RATs) have successfully crossed levels in real-world attacks, including Colonial Pipeline and Triton. ## Known Weaknesses & Attack Paths Despite its design, Purdue isn’t immune. In fact, when improperly enforced, it introduces a false sense of security. Common failure modes include: - **Flat networks:** All levels can "see" each other, no real segmentation - **Unmonitored OT protocols:** Modbus, DNP3, OPC exposed to L3/L4 - **Shadow IT:** Ad-hoc engineering workstations bridging levels - **Legacy hardware:** No patching, no authentication, high fragility This creates the perfect environment for **lateral movement and stealthy persistence**. ## Where Firevault Fits ### Firevault – Offline Digital Vault Firevault introduces a completely new layer: **Offline Isolation**. It sits outside Purdue entirely, removing the data that attackers target: - **No attack path:** Vaults are physically disconnected and inaccessible from any Purdue layer - **No credential risk:** Access requires both physical possession and verified identity - **No ransomware payload impact:** Backups, control files, or IP can’t be encrypted if offline Think of Firevault as your **Purdue Level -1**: A clean, unreachable mirror of crown-jewel data that operational continuity depends on. ## How CSPaaS Strengthens Purdue **Firevault CSPaaS** overlays the Purdue Model with forensic-grade, real-time control and segmentation. - **Level 3 Isolation:** Disconnects the most common attack path from enterprise to ICS via jump servers or MES systems - **Level 2–1 Control:** Locks traffic flow from OT workstations to PLCs unless validated by policy - **Policy Enforcement Modules:** Each Firevault module (Lock, Relay, Fracture, Vault) aligns with Purdue zones, offering switch-based or virtual enforcement that is tamper-evident - **Zero Trust for ICS:** Segmentation isn’t just logical, it’s physical, timed, identity-locked, and logged CSPaaS enables **policy at the power level**, not just at the port. ## Framework & Compliance Alignment The Purdue Model underpins several ICS/OT frameworks, Firevault reinforces them with real-world enforcement: - **[IEC 62443](/solutions/control/frameworks/iec-62443):** Aligns to zone-conduit models with enforced disconnection - **NIST 800-82:** Supports industrial control segmentation and restoration - **NIS2 & GDPR:** Isolates personal or operational data, aiding legal compliance - **Zero Trust for OT:** Makes implicit trust impossible, nothing runs unless validated ## Frequently Asked Questions **Is the Purdue Model still relevant?** Yes, but only when implemented rigorously. Firevault makes it defensible by removing exploitable assets and enforcing segmentation in hardware. **How does Firevault avoid Purdue path attacks?** Vaults are physically air-gapped, outside the network. Even if every Purdue level is compromised, Firevault remains unreachable. **Can I apply CSPaaS retroactively?** Yes. CSPaaS modules are deployable to legacy environments with minimal disruption, supporting isolation without overhauling infrastructure. **Why do I need Firevault if I already segment networks?** Segmentation without isolation is delay, not prevention. Vaults remove data from the blast radius completely. ## Firevault’s Verdict The Purdue Model gave OT environments a roadmap. But attackers have found every shortcut and hidden staircase between the layers. **Firevault puts your most critical data behind an invisible, untouchable, and unhackable wall.** **CSPaaS makes Purdue real again, by enforcing it in ways software firewalls and VLANs can’t.** If your OT environment matters, Firevault should be the layer below Layer Zero. [↑ Back to top](#contents) About the author ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Physical disconnection removes the path an attacker needs Offline Secure Storage® holds a clean copy of your data on hardware that is physically disconnected, so an intrusion cannot reach it, encrypt it or delete it. [Get started](/get-started)[Talk to the team](/demo) **Hardware**Your data sits on dedicated encrypted hardware **Disconnect**Offline by default, connected only when you say so **Command**Access windows and retrieval under your control **Location**Held in a secure Firevault Bunker Related Reading ## You may also find these useful [ ![NIST Cybersecurity Framework (CSF): Everything You Need to Know](/__l5e/assets-v1/3675d592-37ce-4b4f-a801-25325c857548/nist-csf-explainer-1771248286976-2x.jpg) Explainer ### NIST Cybersecurity Framework (CSF): Everything You Need to Know NIST Cybersecurity Framework (CSF): Everything You Need to Know Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is… 10 Jul 2025 4 min ](/news/nist-cybersecurity-framework-csf-everything-you-need-to-know)[ ![The MITRE ATT&CK Framework: Everything You Need to Know](/__l5e/assets-v1/2626b42c-2d81-46aa-a3a2-8866b2f9d78a/mitre-attack-explainer-1771248287180-2x.jpg) Explainer ### The MITRE ATT&CK Framework: Everything You Need to Know MITRE ATT&CK Framework: Everything You Need to Know Updated July 2025 | Estimated read time: 8 minutes | Published by Firevault Contents What Is MITRE ATT&CK?… 10 Jul 2025 4 min ](/news/the-mitre-attck-framework-everything-you-need-to-know)[ ![Zero Trust Architecture: Everything You Need to Know](/__l5e/assets-v1/832dae27-2ccf-4a13-aad1-d2850558675b/zero-trust-explainer-1771248288367-2x.jpg) Explainer ### Zero Trust Architecture: Everything You Need to Know Cybersecurity Explainer · Updated July 2025 · Estimated read time: 7 minutes · Published by Firevault Contents What Is Zero Trust? Why Zero Trust Matters Core… 10 Jul 2025 3 min ](/news/zero-trust-architecture-everything-you-need-to-know)[ ![The CIA Triad: Everything You Need to Know](/__l5e/assets-v1/d16e77d1-fdd0-4721-90a2-6c3124b677f3/cia-triad-explainer-1771248291671-2x.jpg) Explainer ### The CIA Triad: Everything You Need to Know CIA Triad: Everything You Need to Know Updated July 2025 | Estimated read time: 7 minutes | Published by Firevault Contents What Is the CIA Triad?… 10 Jul 2025 4 min ](/news/the-cia-triad-everything-you-need-to-know)[ ![OSI Model: Everything You Need to Know](/__l5e/assets-v1/94c97e61-7fdb-43ec-8cd5-d947e573db24/osi-model-explainer-1771248291589-2x.jpg) Explainer ### OSI Model: Everything You Need to Know Updated July 2025 | Estimated read time: 9 minutes | Published by Firevault Contents What Is the OSI Model? The 7 Layers Explained Modern Threats Across the… 10 Jul 2025 4 min ](/news/the-osi-model-everything-you-need-to-know)[ ![GTA 6 leaks: a nightmare or a blip for the biggest video game of the year?](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/gta6-leaks-rockstar-2026.jpg) Insight ### GTA 6 leaks: a nightmare or a blip for the biggest video game of the year? Unreleased Grand Theft Auto 6 footage has appeared online ahead of Rockstar's official preview, and Take-Two is now in court seeking the identities behind the accounts sharing it. The game will still sell. The material that leaked can never be unseen. 22 Aug 2026 3 min ](/news/gta-6-leaks-rockstar-development-footage-2026) Share this article Explainer 9 July 2025 4 min read ## The Purdue Model: Everything You Need to Know Updated July 2025 | Estimated read time: 10 minutes | Published by Firevault Contents What Is the Purdue Model? The 6 Levels of Purdue Architecture Why It… ![The Purdue Model: Everything You Need to Know](/__l5e/assets-v1/1c9e339a-4800-47bb-bedb-428f0218899a/purdue-model-explainer-1771248354803-2x.jpg) ![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg) Published by Mark Fermor , Director & Co-Founder Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know&text=The%20Purdue%20Model%3A%20Everything%20You%20Need%20to%20Know%0A%0AUpdated%20July%202025%20%7C%20Estimated%20read%20time%3A%2010%20minutes%20%7C%20Published%20by%20Firevault%20Contents%20What%20Is%20the%20Purdue%20Model%3F%20The%206%20Levels%20of%20Purdue%20Architecture%20Why%20It%E2%80%A6)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know)[](mailto:?subject=The%20Purdue%20Model%3A%20Everything%20You%20Need%20to%20Know&body=Updated%20July%202025%20%7C%20Estimated%20read%20time%3A%2010%20minutes%20%7C%20Published%20by%20Firevault%20Contents%20What%20Is%20the%20Purdue%20Model%3F%20The%206%20Levels%20of%20Purdue%20Architecture%20Why%20It%E2%80%A6%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2Fthe-purdue-model-everything-you-need-to-know) [Read full article](https://fire-vault.com/news/the-purdue-model-everything-you-need-to-know) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/offline-secure-storage/what-is-oss) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge) Secured by Design Offline by Default [![Firevault - offline secure storage](/assets/logo-white-official-BKfZ19hm.png)](/) The world's first offline secure storage platform for data. Dedicated hardware. Physically disconnected. Online when you need it, offline when you do not. Not Cloud Not HSM Not SaaS Offline by Design Secure by design [ hello@fire-vault.com](mailto:hello@fire-vault.com) United Kingdom Independently certified by [ ![Cyber Essentials Certified](https://fire-vault.com/__l5e/assets-v1/6f8f42a2-89e1-4c20-938f-3f34d30bc90c/cyber-essentials-2026.png) ![Cyber Essentials Plus Certified](https://fire-vault.com/__l5e/assets-v1/8a77bf2c-6711-4762-b093-c4d650153bc9/cyber-essentials-plus-2026.png) ](https://registry.blockmarktech.com/certificates/) ### Stay Updated Security insights, product updates, and threat intelligence delivered to your inbox. Subscribe I agree to receive emails from Firevault. Unsubscribe anytime. ### Products Data Protection & Storage [ ![Offline Secure Storage product icon](/assets/vault-icon-BhL4-R9F.svg) Offline Secure Storage® (#OSS) A Digital Safe Deposit Box ](/offline-secure-storage) Network Evolution & Rapid Protection (#NEARP) [ ![Control product icon](/assets/control-icon-B9EWHzCT.png) Control Data Path Governance ](/control)[ ![Firebreak product icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak Physical Network Segmentation ](/firebreak) ### Firevault - [Offline Secure Storage® (#OSS)](/offline-secure-storage) - [LUV](/luv) - [Vault](/vault) - [Why OSS](/why-oss) - [Meet Firevault](/about) ### Solutions - [Keep Personal Data Secure](/oss-for-personal-records) - [Keep Customer Data Secure](/oss-for-customer-data) - [Keep Critical Data Beyond Ransomware](/oss-for-ransomware-recovery) - [Protect Director Data from Fines & Liability](/oss-for-directors-and-boards) - [Secure the Data Your Business Depends On](/oss-for-business) - [Keep Intellectual Property Secure](/oss-for-intellectual-property) - [OSS Use Cases](/oss-for-use-cases) - [Compliance & Risk](/compliance) - [Network Evolution & Rapid Protection (#NEARP)](/solutions/control) ### Resources - [Firevault Playbooks](/playbooks) - [The Leaders' Playbook](/playbook/leaders) - [Firebreak for Water Playbook](/playbook/firebreak-water) - [A Control Blueprint for AI](/playbook/ai-control-blueprints) - [Knowledge Vault](/learn/knowledge) - [White papers](/learn/whitepapers) - [How OSS Works](/how-oss-works) - [How OSS Physical Disconnection Works](/offline-secure-storage/what-is-oss) ### Company - [Press and Media](/press-media) - [Knowledge Vault](/learn/knowledge) - [FAQs](/learn/faq) - [Help Centre](/help) - [Careers](/careers) - [Invest in Firevault](/investors) [](https://www.linkedin.com/company/firevault-limited)[](https://www.facebook.com/profile.php?id=61581962517246)[](https://twitter.com/firevaultuk)[](/rss.xml) Firevault - Disconnect to Protect® [Site Map](/sitemap)● [Privacy Charter](/privacy-charter)● [Terms of Service](/terms)● [Planet Pledge](/planet-pledge)● [Vault User Commitment](/vault-commitment)● [LUV User Commitment](/luv-commitment)● [Cookie Policy](/cookies) © 2026 Firevault Limited Company No. 16320803 · VAT No. 490 8551 64 · Registered in England and Wales ![Firevault](/favicon.svg) Not sure where to start? Ask us.