Skip to main content
AirGapNetPhysical network isolation
Frequently asked questions

Answers without digging.

Product, deployment, security, compliance, and pricing answers for teams evaluating where a physical network break fits.

26

answers

5

categories

1 day

reply target

All questions

26 answers

AGN1 is a hardware switch installed inline on a single network path. By default the line is physically open — neither side is electrically reachable. You open the path for a defined window (manual, scheduled, or event-based) over an independent GSM control channel, and the line returns to a physical break when the window ends.

No — it's an additional layer. Firewalls, EDR, and segmentation are software-based and assume the path exists. AirGapNet changes whether the path physically exists. Use it in addition to your existing stack, not in place of it.

A managed switch, VPN, or jump host still keeps the line electrically connected — you trust software to gate access. AGN1 makes the path physically not-exist by default. The attack surface during the closed state is zero, because there is no surface.

Three modes — manual (SMS code), scheduled (recurring windows), or event-based (verified signal). Auto-close runs locally on the device. When the timer expires, the line returns to a mechanical break — no software command required.

AGN1 ships with a built-in antenna. For low-signal environments, an external SMA antenna is available as an accessory. The control channel is independent of the protected LAN by design.

AGN1 is controlled individually via SMS or app today. AirGapNet Cloud, in development, will provide centralized fleet management, group scheduling, and audit export. Cloud is a future addition — AGN1 ships fully functional on its own.

Every state change — open command received (with originating phone number), window opened, window closed, expiry. Audit data is stored locally on the device and exportable via the management port. AirGapNet Cloud will provide audit aggregation across a fleet.

No. AGN1 operates entirely offline from the AirGapNet vendor side — no telemetry, no analytics, no remote calls home. The control channel only carries traffic between the device and the phone numbers you have whitelisted. Your operational data stays yours.

The default state under any failure mode — power loss, GSM module fault, firmware crash — is physically open. The line stays disconnected. A failed device is replaced under warranty; until replacement, the protected path is offline (which is the safe state by design).

AirGapNet is currently in the US compliance process. We will publish the FCC ID and conformity statement on this page as soon as it is finalized. Until then, devices ship from European warehouses to early US pilots — talk to us about deployment timing.

United States and Canada today. EU customers are served through AirGapNet GmbH in Austria. Other geographies are evaluated case-by-case — contact us for volume orders.

24-month limited warranty on hardware. Return window: 30 days from receipt for unused, unopened units. Defects covered under warranty are repaired or replaced.

No. AGN1 is a one-time hardware purchase. The independent control channel uses your own GSM SIM card and carrier plan (typically $5–$10 per month). AirGapNet Cloud, when available, will be a separate optional product.

Yes. Volume pricing is available for MSPs, fleets of 5+ units, and channel partners — including deal registration and demo-unit programs. Contact us for partner terms.

Air-gapping is a security control that physically separates a network or device from other networks so data cannot move between them. The separation can be a removed cable, a disabled wireless link, or a hardware switch on the line. AirGapNet is the hardware-switch flavor — physical, scheduled, and audited.

AGN1 is the single-line device — one controlled path per unit, shipped at $1,099 today. AGN2 is the 19-inch rack version that controls multiple lines in one chassis, intended for server rooms and multi-line setups. Both use the same independent GSM/SMS control channel.

Both add a physical control layer on top of your existing firewall, EDR, and segmentation. Service paths that today stay reachable 24/7 (vendor VPNs, update channels, backup targets, admin tunnels) become time-boxed at the hardware layer — open only during approved windows.

AGN1 is in stock and ships in 5 days — order directly from /products/agn1 at $1,099 per unit. AGN2 is quote-led for rack environments; submit /contact?intent=quote and we reply within one business day. AirGapNet Cloud, for fleet management, is on a waitlist.

Email and the two office phone numbers (Wilmington DE for US, Neuhofen a. d. Krems for EU) are listed in the footer. For a demo, use /demo. For pricing, use /contact?intent=quote. Most replies arrive within one business day.

Not yet. Today you supply your own SIM and pick the carrier plan — typical cost is $5–$10 per month per device. An all-inclusive variant with a managed SIM is in development; until then, any standard data SIM works.

Yes. AGN1 supports multiple whitelisted phone numbers — operators, on-call engineers, and external maintenance vendors can each have their own. Every control event is logged locally with the originating number.

In the current product version the SMS payload itself is not application-layer encrypted, though the carrier network applies standard GSM-level encryption between the device and the cell tower. The upcoming mobile app + AirGapNet Cloud release will add end-to-end message encryption on top of the SMS channel.

Target GA is Q3 2026. Early-access pilots start Q1 2026 for partners and customers with 10+ deployed AGN1 / AGN2 units. Sign up for the waitlist on this page to be considered.

A fleet of AGN1 and AGN2 hardware devices. Bulk window scheduling, group rollouts, central audit-log aggregation, per-site policy templates, and the AirGapNet App for operators. The control channel remains independent of the production LAN.

No. AGN1 works standalone via SMS or the AirGapNet App. Cloud is for teams running roughly 10+ devices or operating across multiple sites where coordinated scheduling and central audit become operationally important.

The commercial model is being finalized with early-access partners. We will publish a pricing page before general availability. Early-access pilots are included in partnership terms — contact us for details.

Still have questions?

Talk to the team directly.

We answer most questions within one business day. For a demo of the hardware on your network, the fastest path is the demo form.