Security Products

Purpose-built security tools designed for organizations that need to own their infrastructure, keep data sovereign, and operate at the edge.

Cyberfort Armora

On-Prem AI SIEM & SOAR — Data Sovereignty by Design

Armora unites log collection, AI analytics, and automated response in a privacy-first platform that runs on your infrastructure. A local LLM reads raw logs and incidents, explains what is happening and recommends remediation — in plain language, without sending data to public cloud services.

  • Centralise logs from Windows, Linux, firewalls, cloud and OT devices
  • Private LLM analyst — no data sent to public LLM services
  • SOAR playbooks with visual builder and approval steps
  • Compliance reporting for GDPR, NIS2, and ISO 27001
  • On-prem, hybrid, or private cloud deployment
  • Built for SMEs and public sector budgets

Cyberfort EdgeGuard

Smart Energy IoT Firewall — Zero Trust at the Edge

DIN-rail cybersecurity appliance that enforces zero-trust at the energy edge. Deep packet inspection for Modbus TCP/RTU and MQTT, integrated IDS/IPS, and OTA hardening — built for installers, integrators, and grid operators.

  • DIN-rail form factor — drop-in for electrical cabinets
  • Modbus TCP/RTU deep packet inspection with function-code allow-lists
  • MQTT proxy with topic filtering and TLS enforcement
  • Learn Mode auto-generates firewall & protocol rules
  • Integrated Suricata IDS/IPS with OT rule packs
  • SOC connector to Armora for fleet management
  • Secure OTA updates with SHA-256 verification
  • TPM 2.0 device identity and secure boot

Armora + EdgeGuard

When paired together, Armora becomes the central command plane for your OT and energy infrastructure — collecting telemetry from EdgeGuard devices, applying AI analytics, and pushing updated policies back to the edge.

📡

Fleet Visibility

Unified dashboard showing all EdgeGuard devices, health status, and security posture across all sites.

🔒

Secure Command Channel

TLS 1.3 mutual-auth uplink for OTA updates, Learn Mode triggers, and playbook-driven actions — all remotely.

Automated Escalation

Isolate compromised sites, switch communication channels, and trigger incident response automatically on breach detection.

See our products in action

Schedule a live walkthrough with the Cyberfort team and explore how Armora and EdgeGuard can secure your infrastructure.