Frequently Asked Questions

The Internet of Things (IoT) is a network of interrelated, internet-connected objects that can gather and share data with other devices across a network. IoT devices contain sensors and operating systems enabling data transmission. There are over 28 billion IoT devices currently active globally.

IT/OT convergence is the integration of information technology (IT) systems with operational technology (OT) systems. IT systems handle data computing while OT systems monitor physical operations and make adjustments in enterprise environments. As these systems converge, the security gaps between them become a critical vulnerability.

IT security solutions cannot see what connected devices access on networks. As organizations add more IoT devices, vulnerability grows because unseen devices cannot be identified, isolated, or contained — allowing malware to spread laterally across the network undetected.

Industrial Internet of Things (IIoT) includes devices used by industry such as robots, Supervisory Control and Data Acquisition (SCADA), Programmable Logic Controllers (PLCs), and sensors networked together with industrial applications. These systems are critical to operations but are typically invisible to traditional IT security tools.

Onclave Networks is a cybersecurity company protecting OT, IoT, and IT devices using Zero Trust policies. Incorporated in 2019, the founders focused on bringing the same level of protection to IoT that the U.S. military and Intelligence Community employs for their most sensitive networks.

The TrustedPlatform is a unified Zero Trust platform comprising five integrated components: TrustedBlockchain™ (manages identities and root of trust), TrustedDMS™ (device discovery and monitoring), TrustedOrchestrator™ (builds secure enclaves and manages policy), TrustedBroker™ (creates trusted secure communications), and TrustedEdge™ (forms cryptographically secure enclaves at the device level).

Blockchain provides the most secure record of transactions in a decentralized trust framework using a distributed architecture. It ensures data integrity, provides a reliable and tamper-proof audit trail for all registered devices, and eliminates any single point of failure in the chain of trust.

There are three primary cost benefits: (1) Lower security costs by eliminating the need for VPNs and traditional firewalls; (2) Reduced operational costs through integrated, centralized management; and (3) Lower connectivity costs through L2 encryption technology for remote access — replacing per-device certificate management, policies, and ACLs.

Onclave integrates techniques and technologies used by the U.S. Department of Defense and Intelligence Community with its own patented technology to help enterprises achieve a Zero Trust framework that is more secure, more manageable, and more cost-effective than any combination of traditional point solutions.

The TrustedPlatform functions as an overlay, integrating into existing infrastructure across physical, virtual, and hybrid scenarios without requiring changes to the underlying network. It was built from the ground up aligned with the NIST Risk Management Framework, allowing phased implementations on commercial hardware. There is no rip-and-replace of existing infrastructure.

Enclaves are not limited by device count, but rather by the amount of bandwidth and data flowing through a port based on device activity within the network. The TrustedPlatform can scale to accommodate environments of virtually any size.

Yes. You can manage any number of enclaves simultaneously, restricted only by network bandwidth and the compute capacity needed for data throughput requirements. The TrustedOrchestrator manages the policy and topology relationships across all enclaves from a single pane of glass.

Network management is handled by two components working together: the TrustedOrchestrator™ (which builds network topologies and organizes devices into enclaves) and TrustedDMS™ (which passively monitors the network and checks for anomalous behavior, issuing alerts and triggering automated isolation when threats are detected).

TrustedDMS provides continuous device discovery and behavior-based monitoring, recording MAC/IP addresses, ports, and behavioral patterns. It issues Operator Alerts for: (1) New devices appearing on the network; (2) Unknown IP addresses and ports; and (3) Behavior that differs from a previously discovered common behavioral pattern. Monitoring is passive — no active scanning that could disrupt OT systems.

The TrustedOrchestrator is a rules-based policy engine used to facilitate the creation of enclaves and manage the relationships between TrustedBrokers and TrustedEdges across the network. It provides centralized visibility and control, pushing configuration changes in real time without requiring manual reconfiguration of individual devices.

TrustedDMS sensors passively collect data on MAC/IP addresses, traffic flows, and behavioral patterns — without active scanning that could interrupt operations. Custom alert rules can be created for any device abnormality, and the system can automatically trigger isolation and containment responses when anomalous behavior is detected.