The US Government doesn’t want you to buy our product.

We agree with Idaho National Lab! You should build your open source OT monitoring hardware from scratch and build the latest version of each open-source tool and Malcolm.fyi from source.

But, if you’re lazy like us and prefer a device that’s setup for you out-of-the-box, (as part of our DEFCON 32 launch event) includes a free 3 year warranty and support for updates…. we’re happy to sell you a device with free shipping.

Check out this awesome warning INL put on the Malcolm website after we handed out granola bars and candy at ICS Village at DEFCON 32 telling everyone how much we love Malcolm:

Small box. Generous capability.

The Open OT Appliance:
MVP Edition

Protectli VP6650

Intel® i5-1235U 10 Core / 12 Thread (Turbo up to 4.4 GHz)2 Intel® 10G SFP+ NIC Ports (with SFP-10G-T installed), 4 Intel® 2.5G Copper NIC Ports4TB Kingston NVMe and room to add two additional 2.5″ SSDs32GB DDR5-4800 SODIMM (room to add an additional 32GB)2x 2.5″ SSD connectors and mountsIncluded 12v/120W Power Supply, Serial Console Cable, USB-C Cable, SATA data and power cables for internal SSDs, Quick Start Guide

Proxmox VE Hypervisor

Based on Ubuntu LTS, Proxmox is the ideal FOSS hypervisor for Open OT. If you need higher assurance on your hypervisor support, the installed Proxmox VE environment would permit you to install your self-procured license key.

Malcolm

As we said during our DEFCON 32 launch: we love Malcolm for OT cybersecurity. It comes pre-installed.

Built-in OT DMZ Using Open Source Firewalls

Taking advantage of the multi-port architecture of the appliance, you have a full Perdue Level 3.5 DMZ out of the box.
Plug one port into your IT network, another into the OT network, and (if you have one) a third into your DMZ network switch. (4th port configured for Proxmox VE management and should only be connected during on-site administration or to a dedicated out-of-band management network).
Two additional SFP+ ports are ready for use as passive data collectors for Malcolm network monitoring at up to 10Gbps (comes with SFP-10G-T modules installed but you can swap them for optical modules depending on your specific architecture).
All ports are labeled and pre-configured with FOSS firewalls so that your OT DMZ is ready and secure-by-default upon install.

Open OT Appliance MVP Edition

$5,000.00

Open OT Appliance: MVP Edition Our first product, the very thing the US Government fears so much, ready-to-ship and protect and monitor your ICS network!

Category: