What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

NIST CSF

Physical Enforcement Across All Five CSF Functions

The NIST Cybersecurity Framework organises security into five functions: Identify, Protect, Detect, Respond, and Recover. Firevault Control provides physical enforcement capabilities that strengthen every function.

Back to Control

NIST CSF

The NIST CSF is a framework for organising security capabilities. Physical enforcement is what makes those capabilities genuinely effective against determined adversaries.

5/5

CSF functions with physical enforcement

CSF categories addressed by Control

100%

Physical protection for critical assets

Full

Automated CSF maturity evidence

The Maturity Challenge

Advancing CSF maturity requires stronger controls.

Protect Function Gaps

Most organisations achieve basic Protect function maturity but struggle to demonstrate that protective controls are continuously effective against sophisticated threats.

Respond Function Speed

Incident response depends on the ability to contain threats quickly. Software-based containment takes time and may be undermined by the same compromise it is trying to contain.

Recover Function Assurance

Recovery capabilities are only as good as the integrity of backup systems. Network-connected backups can be compromised alongside production systems.

The Scenario

Scenario: CSF Maturity Assessment with Physical Controls

An organisation assesses its CSF maturity and finds it is at Tier 2 (Risk Informed) across most functions. The Protect function relies on firewalls and access controls that have been bypassed in penetration tests. The Respond function takes hours to contain incidents because containment requires coordinated firewall changes. The Recover function uses network-connected backups that would be compromised in a real ransomware attack. With Firevault Control, the organisation advances to Tier 4 (Adaptive) for Protect, Respond, and Recover functions. Physical zone boundaries cannot be bypassed. Incident containment operates in seconds through physical path severance. Recovery is guaranteed through air-gapped archives.

"We were stuck at Tier 2 maturity for three years. Every improvement we made was incremental. Physical enforcement moved us to Tier 4 for our most critical functions because it fundamentally changed the assurance model."

Framework Mapping

Advance CSF maturity through physical enforcement.

Organisations advance their NIST CSF maturity by adding physical enforcement to every function. Protection is physical and cannot be bypassed. Response operates in seconds. Recovery is guaranteed. Evidence of continuous maturity is generated automatically for assessments and board reporting.

Physical enforcement across all five CSF functions
Tier 4 maturity for Protect, Respond, and Recover
Seconds-fast incident containment through physical severance
Guaranteed recovery through air-gapped archives
Continuous maturity evidence for assessments
Clear CSF category-to-module mapping documentation

Fracture — Respond Function: Rapid Containment

Module 1 of 4

Physical path severance provides Respond function capabilities that operate in seconds rather than hours. Containment is guaranteed regardless of the sophistication of the attack or the state of software controls.

View all nine modules

Featured In

Key Capabilities

Identify: Asset Boundary Mapping

Control modules define and enforce physical boundaries around critical assets, providing clear asset identification and boundary documentation.

Protect: Physical Access Control

Physical zone separation and multi-party authorisation provide protective controls that cannot be circumvented through software techniques.

Detect: Boundary State Monitoring

Continuous monitoring of physical boundary states provides detection capabilities for any unauthorised path activation.

Respond: Seconds-Fast Containment

Physical path severance provides incident containment in seconds, dramatically reducing the window of exposure during active threats.

Recover: Air-Gapped Assurance

Physically disconnected recovery archives guarantee restoration capability regardless of the scope of network compromise.

Maturity Evidence

Continuous logging and automated CSF mapping documentation supports maturity assessments and demonstrates advancement over time.

Demo to Live

Adoption Guide

Step 1

CSF Maturity Assessment

Assess your current CSF maturity tier across all functions and identify where physical enforcement would provide the greatest maturity advancement.

Step 2

Target Profile Alignment

Map your Target Profile to Control modules to design a deployment that advances maturity for your priority CSF categories.

Step 3

Function Validation

Deploy Control for your highest-priority function and validate maturity advancement through a controlled assessment.

Step 4

Full CSF Deployment

Organisation-wide deployment with physical enforcement across all functions, continuous maturity evidence, and automated CSF reporting.

Step 1

CSF Maturity Assessment

Assess your current CSF maturity tier across all functions and identify where physical enforcement would provide the greatest maturity advancement.

Step 2

Target Profile Alignment

Map your Target Profile to Control modules to design a deployment that advances maturity for your priority CSF categories.

Step 3

Function Validation

Deploy Control for your highest-priority function and validate maturity advancement through a controlled assessment.

Step 4

Full CSF Deployment

Organisation-wide deployment with physical enforcement across all functions, continuous maturity evidence, and automated CSF reporting.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Physical Enforcement Across All Five CSF Functions

Advancing CSF maturity requires stronger controls.

Protect Function Gaps

Respond Function Speed

Recover Function Assurance

Scenario: CSF Maturity Assessment with Physical Controls

Advance CSF maturity through physical enforcement.

Fracture — Respond Function: Rapid Containment

Key Capabilities

Identify: Asset Boundary Mapping

Protect: Physical Access Control

Detect: Boundary State Monitoring

Respond: Seconds-Fast Containment

Recover: Air-Gapped Assurance

Maturity Evidence

Adoption Guide

CSF Maturity Assessment

Target Profile Alignment

Function Validation

Full CSF Deployment

CSF Maturity Assessment

Target Profile Alignment

Function Validation

Full CSF Deployment

Explore More

ISO 27001 Framework

MITRE ATT&CK Mapping

Cyber Essentials

Frequently Asked

Ready to take the next step?

Your privacy matters