AirGapNet AGN1
Service path controller
A physical break for one service path. Default-closed. Opens only on a scheduled window.
Choose configuration
Two configurations
How it works
AGN1 sits between the production server and the vendor or maintenance side. By default the line is physically open — no firewall rule, no software trust. The path only exists for a scheduled window, then returns to a mechanical break.
Default state · Path closed
Timeline
Tap a phase to scrub →
By default the line is physically open — neither side is electrically reachable. The break is hardware, not a firewall rule.
Use cases
Six common paths where always-on reachability creates unnecessary exposure.
Take a server off the public internet between active sessions. The line returns only for approved windows — backups, updates, vendor jobs.
Open admin access to a server during a scheduled maintenance slot. The path closes automatically when the window ends.
Backup targets stay disconnected from the production network and only open when the backup job runs. Ransomware cannot follow what is not connected.
Pair AGN1 with an air-gapped backup target so the vault is reachable only on explicit, time-limited writes. Combine with WORM storage for true immutability.
Disconnect cameras, sensors, displays, or kiosks from the network when they aren't actively in use. Reduces the lateral-movement surface from edge devices.
External technicians get scoped access to one device during a defined window. No on-site escort, no entire-network exposure.
Box contents
15.9 oz (450 g) kit
Packed for one first deployment: device, power, plug set, and the control reference.
Product kit
The shipment is built around one job: put a physical control point on one service path without turning setup into a procurement project.
Recyclable card packaging. External SMA antenna optional for sites that need it.
Specifications
A quick buyer-readable view of AGN1. The full datasheet stays available for audits, procurement, and engineering review.
Inline RJ45 switching for one service path, closed by default until a window opens.
The control channel is separate from the protected LAN, so the network being protected cannot operate the switch.
Low-power, fanless operation for shelves, cabinets, and small network rooms.
Compact enough for a shelf, cabinet, or device-side install without a rack requirement. Metric: 95 × 156 × 35 mm.
Need the formal sheet?
Dimensions, power, control channel, ordering, and compliance notes in a printable two-page PDF.
Pricing
A single AGN1 costs less than one hour of incident response.
$1,099 is a one-time hardware purchase, not a SaaS line item. Here is what that number reflects and what it replaces.
What it replaces
Option
Do nothing
Cost
$0 upfront
Tradeoff
Average ransomware loss $4.5M
Option
Manual cable pull, per maintenance
Cost
$250–$500 / visit
Tradeoff
Operational friction, no audit trail
Option
Enterprise network appliance (Cisco / Fortinet)
Cost
$5K–$20K + licensing
Tradeoff
Overbuilt, software-only isolation
Option
AGN1
Cost
$1,099 one-time
Tradeoff
Hardware physical break, GSM control
Volume
Volume pricing is available for MSPs, fleets of 5+ units, and partner deals. Request a quote.
Not in the $1,199
FAQ
Product, deployment, security, warranty, and pricing — the items most buyers raise on the first call.
The rest of the line
Move from a single service path to rack-scale switching or fleet management without changing the default-closed model.
Rack infrastructure isolation
The 19-inch rack version of AGN1 for larger server rooms and multi-line setups.
Request quote
Request quoteCentralized hardware management
Coming soon — central management for a fleet of AirGapNet devices.
Request demo
Request demo