Physical isolation for wind, solar and battery storage sites

Renewable generators run a fleet of remote sites with heavy OEM remote access into turbines, inverters and battery management. Firevault Control puts a real boundary between the office, the OEM zone, the fleet operations centre and the controllers behind them.

100%

Site SCADA isolation from corporate IT

Zero

Persistent OEM access to inverter or BMS controllers

6

Control modules deployed per renewable site

Full

Evidence for NIS2 and Grid Code expectations

"Our biggest standing connection was never an attacker. It was a vendor. That is the gap to close."

Where each module is deployed, and what it does there.

One row per module. Placement on the network, then plain-English purpose at that point.

1. Isolate

   At every zone boundary on the diagram

   Office, OEM, fleet ROC and site SCADA all sit on separate physical fabrics. An OEM compromise cannot walk into the fleet.

2. Firebreak

   On the L5 to L4 link

   A real off switch on the public boundary when an incident is in flight.

3. Relay

   On the OEM link

   OEM connections exist for the window of work and not a minute more.

4. Unlink

   On the OEM link

   When an OEM engagement or maintenance window ends, Unlink removes the persistent connection and the inherited trust.

5. Validate

   On the L5 to L4 link and the OEM link

   Firmware and engineering traffic is checked for origin, integrity and authority before it reaches fleet operations.

6. Execute

   Inside the OEM link and on the L2 to L1 link

   Firmware, curtailment and setpoint changes hold until the right authority signs them off.

7. Lock

   On the OEM link and the L1 to L0 link

   Access to turbines, inverters and batteries ties to named engineers. Standing access is the exception.

Sovereign generation data

Operational and Grid Code data remains within the agreed jurisdiction in carefully selected Firevault Bunkers.

Multi-party control

Curtailment, setpoint and firmware actions require sign-off from both fleet operations and security teams.

Regulatory evidence

Continuous compliance evidence for NIS2 and Grid Code cyber expectations for inverter-based resources.

Out-of-band management

Cellular and dedicated paths keep the control plane reachable when primary networks are compromised.

Tamper-proof logging

Every access, configuration change and curtailment command lands in immutable logs on physically separate infrastructure.

Verified configuration baselines

Verified baselines of turbine, inverter and BESS configuration enable a known-good restore of control-plane state.

Network assessment

Map every path between corporate IT, OEM portals, the fleet operations centre and per-site SCADA to identify standing vendor connections.

Zone architecture design

Design physically separated zones aligned to OEM, fleet and per-site boundaries, with Control modules at each one.

Non-production pilot

Deploy in a test environment mirroring a single site and the ROC with full zone separation, multi-party authorisation and compliance logging.

Operational deployment

Full deployment across the renewables and BESS estate with verified configuration baselines, continuous compliance evidence and 24/7 out-of-band management.