Leads to Blueprint CP-04 and CP-05.
Control, systems and access
Govern every path in and out.
Control governs connectivity in hardware at Layer 1. Paths open on command, close on command and leave an audit trail. Start with the need you have, then move to the Blueprint that delivers it.
As featured in
What Control is
Physical governance for the paths your systems depend on.
Five needs covering systems and access. Each one leads to the Control Blueprint built to deliver it.
Hardware enforcement
The path is broken in physics, not in a rule set that can be misconfigured. Firebreak® hardware is manufactured by Firevault.
Command and audit
Every open and close is authorised, time-bound and logged for evidence.
Modular deployment
Nine Blueprints, CP-01 to CP-09, matched to the environment you run.
Leads to Blueprint CP-01 and CP-02.
Ransomware and lateral movement
ExploreLeads to Blueprint CP-03.
Third-party and remote access
ExploreLeads to the AI Control patterns, including CP-08.
AI systems and infrastructure
ExploreLeads to Blueprint CP-04 and CP-05.
Data centre and colocation exposure
ExploreBy Blueprint
Pick a Blueprint.
Watch its modules leave the deck.
Nine deployment Blueprints, CP-01 to CP-09, each aimed at one outcome: three trust zones, the modules on each boundary, and what is held offline in Offline Secure Storage®.
By industry
Control Blueprints for your industry.
Sector-specific deployments for the environments where path governance matters most.
By threat
Pick the attack pattern you need to contain.
From ransomware to insider risk and supply chain compromise. Each threat maps to a Control response.
Ransomware
Ransomware containment
Sever the path before ransomware spreads.
ExploreInsider
Insider threat
Remove persistent access outside operational windows.
ExploreSupply chain
Supply chain risk
Disconnect third-party paths when not in active use.
ExploreIT/OT
IT/OT convergence
Physically separate IT from operational technology.
ExploreManagement plane
Management plane exposure
Isolate management interfaces from production networks.
ExploreModules and frameworks
The platform underneath, and the standards it evidences.
Nine Control modules deliver the enforcement. Compliance frameworks are mapped to outcomes, so audits get evidence rather than assertions.
Firebreak
Physically opens or closes connection paths to prevent unauthorised access and stop attack progression.
Explore FirebreakFrameworks mapped
Control can help support each of them. It does not make you compliant on its own.
Playbooks
Published playbooks.
Board-ready briefings for Control decision makers. Free to download after a quick identity check.
The Leaders’ Playbook
A board-level briefing on sovereign data, succession resilience and physical protection.
Read the playbookA Control Blueprint for AI: 2026 Playbook
A 40-page blueprint on AI infrastructure, open weights, agents and kill-switch design.
Read the playbookQuestions
What security and risk teams ask first
A need is the problem you start from, such as third-party access. A Control Blueprint is the deployment pattern that delivers the outcome for that need. The nine modules are the parts each Blueprint is assembled from.
Over dedicated management Ethernet, cellular SMS or an authenticated API. The command path never touches the production network, so the command does not travel on the wires it is meant to cut.
Every action is logged locally and to SysLog, signed and timestamped, for NIS2, DORA, insurers and internal audit. Control can help support those obligations; it does not make you compliant on its own.
Firebreak® is manufactured by Firevault and supplied by Firevault within Control.

Decide what stays connected.
We will walk your architecture, map the need to a Blueprint and show you the evidence the board will be asked for.











