What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Water

Treatment Plant and Distribution SCADA Path Control

Water treatment and distribution systems directly affect public health. When control systems are compromised, attackers can alter chemical dosing, disrupt supply, or contaminate drinking water for entire populations.

Back to Control

Water

When a water treatment control system is reachable from the corporate network, every phishing email becomes a potential path to altering the chemical composition of a city's drinking water.

100%

Treatment SCADA isolation from corporate IT

Zero

Persistent remote access to dosing systems

Operational zones with independent governance

Full

NIS2 and DWI compliance evidence

The Challenge

Water infrastructure faces direct public health threats.

Chemical Dosing Risks

Compromised control systems could alter chlorine dosing or pH levels in treatment processes, directly threatening public health on a massive scale.

Remote Pumping Stations

Hundreds of remote pumping stations and reservoirs rely on SCADA communications with limited local security, creating distributed entry points.

IT/OT Convergence

Smart water network modernisation creates network paths between corporate IT and operational technology that attackers can traverse.

The Scenario

Scenario: Water Treatment SCADA Compromise

Attackers compromise a water company's corporate network through a targeted phishing campaign against the finance department. They move laterally until they reach a historian server that bridges the IT and OT networks. From there, they access the treatment plant SCADA system and modify chemical dosing parameters for chlorine and fluoride. The changes are subtle enough to avoid immediate alarm triggers but sufficient to affect water quality across the distribution area. With Firevault Control, the treatment SCADA network is physically disconnected from corporate IT. The historian server operates in a controlled zone with authorised, time-limited data transfer to corporate systems. The attack path from finance workstations to dosing controls does not exist.

"The historian server was our biggest vulnerability. It sat on both the IT and OT networks because the business needed water quality data in their dashboards. It was the bridge that gave attackers a direct path from email to the chlorine dosing system."

Solution Blueprint

Physical governance for water treatment and distribution.

Water companies gain physical control over every network path into treatment and distribution SCADA systems. Corporate IT cannot reach treatment controls. Remote access exists only during authorised windows. Recovery to safe operating parameters is guaranteed through air-gapped configuration archives.

Physical separation between IT and treatment SCADA systems
Multi-party authorisation for all treatment parameter changes
Time-limited, governed access for remote maintenance
Cellular failover for treatment system management
Continuous DWI and NIS2 compliance evidence
Air-gapped recovery to known-safe operating parameters

Fracture — Emergency Treatment Isolation

Module 1 of 4

Physically disconnects treatment SCADA systems during active threats. When a compromise is detected, Fracture severs all network paths to treatment controls within seconds, forcing manual operation until the threat is contained.

View all nine modules

Featured In

Key Capabilities

Sovereign Water Data

All treatment and distribution control data remains within the agreed jurisdiction in secured Firevault Bunkers, meeting Ofwat and DWI requirements.

Multi-Party Process Control

Changes to treatment parameters require authorisation from both operations and water quality teams, preventing unilateral modifications.

DWI and NIS2 Evidence

Automated compliance logging maps directly to Drinking Water Inspectorate requirements and NIS2 Article 21 outcomes for water companies.

Cellular SCADA Failover

Out-of-band management via cellular connectivity ensures control over treatment systems independent of primary communications infrastructure.

Process Change Audit

Every dosing parameter change, valve operation, and access authorisation is recorded in tamper-proof logs for DWI and regulatory audit.

Safe State Recovery

Air-gapped copies of treatment configurations ensure rapid restoration to known-safe operating parameters during compromise scenarios.

Demo to Live

Adoption Guide

Step 1

Water Network Assessment

Map all network paths between corporate IT, treatment SCADA, distribution SCADA, water quality systems, and remote pumping stations.

Step 2

Treatment Zone Design

Design physically separated zones for treatment, distribution, quality monitoring, and corporate systems with Control modules at each boundary.

Step 3

Single Works Pilot

Deploy at one treatment works with full SCADA isolation, multi-party process authorisation, and compliance logging to validate operational procedures.

Step 4

Company-Wide Deployment

Phased deployment across all treatment works and pumping stations with air-gapped recovery, continuous compliance evidence, and cellular management.

Step 1

Water Network Assessment

Map all network paths between corporate IT, treatment SCADA, distribution SCADA, water quality systems, and remote pumping stations.

Step 2

Treatment Zone Design

Design physically separated zones for treatment, distribution, quality monitoring, and corporate systems with Control modules at each boundary.

Step 3

Single Works Pilot

Deploy at one treatment works with full SCADA isolation, multi-party process authorisation, and compliance logging to validate operational procedures.

Step 4

Company-Wide Deployment

Phased deployment across all treatment works and pumping stations with air-gapped recovery, continuous compliance evidence, and cellular management.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Treatment Plant and Distribution SCADA Path Control

Water infrastructure faces direct public health threats.

Chemical Dosing Risks

Remote Pumping Stations

IT/OT Convergence

Scenario: Water Treatment SCADA Compromise

Physical governance for water treatment and distribution.

Fracture — Emergency Treatment Isolation

Key Capabilities

Sovereign Water Data

Multi-Party Process Control

DWI and NIS2 Evidence

Cellular SCADA Failover

Process Change Audit

Safe State Recovery

Adoption Guide

Water Network Assessment

Treatment Zone Design

Single Works Pilot

Company-Wide Deployment

Water Network Assessment

Treatment Zone Design

Single Works Pilot

Company-Wide Deployment

Explore More

Control for Utilities

Control for Critical Infrastructure

IT/OT Convergence Threat

Frequently Asked

Ready to take the next step?

Your privacy matters