PLAN ATOO HOT
Stay connected and react
Always on, always exposed. Rely on detection, and respond after the damage is done — at human speed, against a machine-speed adversary.
Chapter 01 — The threat
The guardrail lives inside the thing it’s guarding.
Autonomous agents find weaknesses, escalate privileges and move laterally faster than any human decision cycle. Software firewalls, VLANs and AI guardrails run in the very environment they protect — so when that environment is compromised, so are they.
29 min
average speed of attack
241 days
average time to recover
$4.88M
average cost of a breach
Chapter 02 — What’s the plan?
Too hot. Too cold. Just right.
When an AI system goes wrong, most organisations have two plans. Neither one works.
PLAN BTOO COLD
Pull the plug on everything
Break glass, shut it all down. Safe — and the business stops with it. Lost productivity, operational friction, and a slow, risky restart.
FIREBREAK™JUST RIGHT
Disconnect exactly what matters, instantly
Physically isolate the AI cluster, model repository or OT domain under threat — and keep the rest of the organisation running. Contain first, then fix.
Over-connection is the risk. Dis/connection™ is the control.
Chapter 03 — Pull the FireBreak
Try out our interactive demo below.
Each port on this FireBreak™ 12 is a physical connection to one part of your AI estate. Tap a system to open its switch, or pull the whole FireBreak at once — and watch the port lights and what an autonomous agent can still reach.
AGENT ACTIONS
1,284,331
RATE
14,725 /s
REACHABLE SYSTEMS
12 / 12
STATUS
Agent spreading
Commands travel out-of-band over a non-IP control channel. There is no network address for the agent to reach, and no software setting it can quietly change back.
Chapter 04 — How it works
No IP. No internet. No override.
FireBreak’s multi-patented design sits inline on the cable. When the control plane says disconnect, a physical relay opens the circuit — and the data plane simply stops existing.
Network
AI AGENTS · INTERNET · IT
FIREBREAK™
Physical relay · connectedCircuit open · isolated
Critical system
MODELS · GPUs · OT · DATA
CONTROL PLANE
Out-of-band · non-IP
Operator · SIEM · SOAR · EDR · API · schedules
Hardware-enforced
A deterministic Layer 1 boundary around compute clusters, model repositories and OT domains, protected by multiple patents. Physics, not policy.
Independent control
The command path never touches the production IP network, so it stays available — and trustworthy — during a total software breach.
Threat-to-action
An open API ties into SIEM, SOAR, EDR and monitoring to trigger physical containment automatically, within milliseconds.
Human authority
People keep the final say over connectivity, isolation and recovery — with an auditable record of every intervention.
Chapter 05 — Three ways to use it
React. Prevent. Schedule.
FireBreak isn’t only a break-glass button. Use it to contain an incident, to keep critical systems offline by default, or to open short, scheduled windows of connectivity — and mix all three across your estate.
MODE 01 · REACTIVE
Contain the moment it’s detected
When your SIEM, SOAR or EDR flags a threat — or an operator sees one — FireBreak physically isolates the affected systems in milliseconds, and keeps the rest of the business running.
MODE 02 · PREVENTATIVE
Keep critical systems disconnected
Model repositories, backups and OT stay physically offline by default and connect only when someone with authority says so. What isn’t connected can’t be reached.
MODE 03 · TIMED ACCESS
Shrink the exposure window
Schedule connections for exactly when they’re needed — a backup run, a model sync, a vendor session — and disconnect automatically when the window closes.
CONNECTED
PHYSICALLY ISOLATED
A typical 24 hours in each mode
Watch · 25 seconds
AI needs a kill switch. FireBreak provides one.
Chapter 06 — Proof, not promises
Approved by the people who defend nations. Tested by the people who attack for a living.
SELECTED · PHASES 1 & 2
NATO DIANA
Selected for both Phase 1 and Phase 2 of NATO’s DIANA defence innovation accelerator — the first round chose 30 companies from roughly 1,300 applicants — and put through Alliance-led experimentation alongside the NATO Communications and Information Agency, including control over quantum-safe encrypted channels without added latency.
NATO-designated Sole Source supplier — because nothing else does what FireBreak does.
APPROVED
NCSC UK
Approved by the UK’s National Cyber Security Centre and advised for physical network segregation under the Cyber Assessment Framework 4.0.
INDEPENDENTLY TESTED BY
Red-teamed, range-tested and validated in live environments.
MITRE
US not-for-profit R&D for national security
QinetiQ
Defence science & test evaluation
CR14
Cyber range & exercise foundation
ProofLabs
Independent security validation
Live lab · DMZ recon
Threat detected. DMZ isolated at Layer 1.
Real hardware, real monitoring stack. When reconnaissance is detected, FireBreak physically pulls the DMZ off the network — the SIEM sees the isolation, and the attacker sees nothing at all.
“An essential technology to better protect and recover from ransomware attacks.”
Chapter 07 — Ready for where it matters
Built for the enterprise. Trusted in sensitive environments.
Multi-patented British technology, built in secure facilities in the UK and the USA. Drop-in, stack-agnostic, and ready for data centres, defence networks, critical national infrastructure and regulated industries — no forklift upgrade required.
CONNECTIVITY
Copper and fibre
Copper RJ45 in 4- and 12-port models, plus a fibre version in 2- and 4-port models for enterprise speeds. Every port is an independent pair.
RESILIENCE
Built to stay in control
Redundant power and SIM options keep the out-of-band command path alive when the production network isn’t.
INTEGRATION
Fits your SOC
An open API with SIEM, SOAR and EDR integration turns detections into physical containment — automatically or with a human in the loop.
COMPLIANCE
Auditable by design
Aligns with NIS2, DORA, ISO 27001, CAF 4.0, US CISA guidance and UK CNI mandates, with a record of every intervention.
HYPER-SECURE SUPPLY CHAIN
Made in the UK. Made in the USA.
Every FireBreak is built in our own secure facilities in the United Kingdom and the United States. Every component is either manufactured by Goldilock or sourced from NATO or EU countries — so you know exactly where your kill switch comes from.
MANUFACTURED IN
USA
US-built hardware from our secure American facility.
MANUFACTURED IN
UK
Designed, engineered and built in Britain.
Components made by Goldilock or sourced from NATO and EU countries only.
Your move
How quickly can you disconnect?
Put a real kill switch between your AI and everything it can reach. See it work — then prove it in your own environment.
OPTION 01
Book a live demonstration
Watch FireBreak isolate an AI workload at Layer 1 — and ask our engineers anything about your architecture.
OPTION 02
Run a Proof of Concept
Deploy FireBreak in your own environment, against your own scenarios, with Goldilock professional services alongside.
Prefer to talk first? Contact us or write to sales@goldilock.com.