Guard Devices
Guard Solutions for Networks
In critical systems, where the boundary between a trusted system and a low trust network cannot be allowed to fail, Kry10 Guard Devices determine and enforce what crosses the boundary.
Partner for Guard DevicesCritical expectations of legacy systems
Critical infrastructure and critical systems that run on certified equipment are often legacy technology, not designed to defend against today’s cyber threats. They are certified to do a job, but AI-assisted cyber offense has decisively changed the speed and sophistication of attacks. For operational technology and critical infrastructure systems, the patching required to maintain security from cyber threats is not scalable. Every change triggers costly recertification and justification of whether the risk of patching to an otherwise functional system is necessary.
Currently in pilot development, Kry10's range of Network Devices are appliances built on formally verified foundations. They sit inline between a trusted, safety-critical system and a lower-trust network. In critical systems, where the boundary between a trusted system and a low trust network cannot be allowed to fail, Kry10 Guard Devices determine and enforce what can cross the boundary.
Key Challenges
-
The threat landscape has changed
The growing AI cyber capability landscape means attackers can now find software flaws faster than defenders can respond. In IT environments, AI-accelerated attacks create urgency but for operational technology, they create a structural crisis — one that faster detection and better patch programs cannot resolve.
-
Compliance costs
Certified devices in field operations often carry vulnerabilities that cannot be addressed without triggering revalidation of the system, which typically takes months at significant cost.
-
Current approaches fall short
Any candidate solution must provide inline protection, require no device modification, address the availability risk of an inline appliance, and be resistant to compromise. Most deployed approaches currently available can satisfy some of those constraints, but no existing solutions can satisfy them all.
Key Capabilities
Kry10 Guard Devices resolve legacy security challenges
-
Buy time against an evolving threat
Patching cannot keep pace with exploit development, and AI is accelerating it. Formal verification is the step forward. With Kry10 Guard Devices, the parser is proven correct against the official specification across every possible input, not inferred from testing.
-
Become a harder target
Certification takes time. Once a vulnerability is known, an attacker can act immediately, but the operator will still need to re-certify. This leaves known vulnerabilities unmitigated in the field. Firewalls built on general-purpose operating systems inherit the same flaws attackers already exploit. KOS (seL4®) and the formally verified parsers in Kry10 Guard Devices reject malformed packets by mathematical proof, not by chance.
-
Become more resilient
Kry10 Guard Devices add logging, deep packet inspection, and secure remote support outside the certification boundary to increase visibility of system health, speed recovery, and reduce the remediation and downtime costs that a degraded device incurs. The unprotected device itself is an availability risk which our Guards help manage, even without an attacker.
GUARD DEVICES
