Security

Built for government networks.

The hard part of putting a system on a government network isn't the software. It's the paperwork. Ours ships with the unit.

How it's built

Locked down before it leaves us.

  • Hardened to the government standard for the operating system, and tested against it before every unit ships
  • Nothing can connect in to deliver data. The appliance reaches out; nothing reaches in
  • Encrypted throughout - the stored data, and every browser connection
  • Separate network ports so satellite, network and console traffic never mix
  • Everything is logged, and the log can't be quietly edited
  • On the Approved Products List for U.S. Army Corps of Engineers networks, approved by Army Corps of Engineers IT

After a cyber incident

Keep operating while you recover.

The dam keeps running

HydroDCS collects straight from the satellite, independent of the network under attack. Operations carry on from its record, so your IT staff can rebuild the main system carefully instead of in a hurry - which is when mistakes happen.

A clean record to check against

Before you trust restored backups, compare them with the record HydroDCS kept during the incident. It is a second, independent copy of the same data, so you can see whether what you are restoring was tampered with.

Your reviewers get evidence

Test results for the actual unit you receive, with a written explanation for every item that didn't pass. Plus the network paperwork and the remediation plan.

We show your reviewers what failed as well as what passed. A perfect score on a system this size usually means somebody narrowed the test until it passed, and a good reviewer will ask.

And it stays current

Security standards change and vulnerabilities appear. Keeping up with both is what the yearly subscription covers, and we do the work rather than sending you instructions.

Updates are applied by us, over your network, with a backup taken first.

Send the paperwork to your reviewers first.