OFFICIAL PARTNER · CYBER BOOST

Waterfall

Name: Waterfall
Brand: Waterfall

Unidirectional security gateways

Waterfall replaces firewalls at the OT boundary with hardware unidirectional gateways (data diodes). Data can physically travel only from the industrial network to IT. The hardware has no return channel for attacks.

UnidirectionalData DiodeOT/IT SegmentationCritical Infrastructure

Request a demo See the products

KEY FACTS

Hardware

hardware-enforced one-way flow

> Firewall

stronger than a firewall

CII

critical infrastructure

2007

year founded (Israel)

Data goes out, attacks don’t come in

PRODUCTS AND MODULES

What the portfolio includes.

Waterfall makes a line of unidirectional products for different OT protection tasks.

USG

Unidirectional Gateways

A hardware data diode: data leaves OT for IT, and the return channel physically doesn’t exist.

HERA

HERA Remote Access

Secure remote access to OT with hardware protection against external attacks.

Replication

Server Replication

Real-time replication of OT servers, historians and databases to the IT network.

Cloud

Unidirectional Cloud

Secure one-way transfer of OT telemetry to cloud services and analytics.

Monitoring

OT Monitoring Feed

Sending data from the OT network to SIEM/SOC without opening inbound connections.

BlackBox

BlackBox Forensics

Protected, immutable storage of OT logs for investigations.

FLIP

Waterfall FLIP

Controlled reversal of the transfer direction for scheduled OT updates.

Protocols

OT Protocol Support

Support for historians, OPC, Modbus, DNP3 and industrial applications.

Compliance

Standards & Compliance

Compliance with critical infrastructure protection requirements (NERC CIP, IEC 62443 and others).

CAPABILITIES

Key capabilities.

Hardware-enforced one-way flow

The hardware makes a return channel physically impossible, regardless of settings.

Stronger than a firewall

Unlike a firewall, a diode cannot be “opened” by a configuration error or an exploit.

Data available to IT

IT and analytics get OT data in real time with no risk to the industrial process.

Server replication

OT historians, databases and servers are replicated to IT for reporting and analysis.

Secure remote access

HERA provides controlled access to OT without a permanent network channel.

SOC integration

Sending OT telemetry to SIEM/SOC without opening inbound connections.

Standards compliance

Support for NERC CIP, IEC 62443 and national critical infrastructure protection rules.

Cloud analytics

Secure delivery of OT data to the cloud for analytics and predictive maintenance.

USE CASES

Who uses Waterfall and how.

Energy

Isolating ICS at power plants and substations while sending data to IT/SCADA historians.

Oil, gas and chemicals

Protecting hazardous plants from remote attacks while keeping monitoring in place.

Water and utilities

Isolating water supply and treatment systems from external networks.

Feeding the SOC

Secure delivery of OT data to the SIEM with no return channel for attacks.

Remote access to OT

HERA for secure maintenance without a permanent network connection.

Critical infrastructure compliance

Meeting the segmentation and protection requirements for critical infrastructure.

Hardware

hardware-enforced one-way flow

> Firewall

stronger than a firewall

CII

critical infrastructure

2007

year founded (Israel)

INTEGRATIONS

Systems and standards Waterfall supports.

HISTORIANS AND SCADA

OSIsoft PIOPC UA / DAModbusDNP3

SIEM AND SOC

SplunkMicrosoft SentinelSyslog

CLOUDS

AWSMicrosoft Azure

STANDARDS

IEC 62443NERC CIP

COMPARING APPROACHES

Waterfall compared with a firewall and an air gap.

Capability	Waterfall (diode)	Firewall	Air gap
OT → IT data transfer	✓	✓	-
Return channel for attacks	No (hardware)	Possible	No
Vulnerable to misconfiguration	No	Yes	No
Real-time data access	✓	✓	-
Critical infrastructure compliance	✓	Partially	✓
Approach	Hardware diode	Filtering rules	Full isolation

A diode gives you the protection of an air gap and still keeps data available. Ask CYBER BOOST about your case.

FAQ

Frequently asked questions

What is a unidirectional gateway (data diode)?

It is a hardware device that physically lets data pass in one direction only, from OT to IT. Data cannot flow back at the optical or electronic level. This means an attacker in the IT network cannot get into the industrial network, even if they know its vulnerabilities.

Why is this better than a firewall?

A firewall can be bypassed through a configuration error, a vulnerability or stolen credentials. A diode physically has no return channel, so it cannot be “opened” in software. For critical infrastructure, this is fundamentally more reliable.

Will IT and analytics still get OT data?

Yes. That is what makes it better than an air gap. OT data is replicated to IT (historians, SIEM, cloud) in real time, and the industrial network stays isolated from incoming threats.

Who deploys Waterfall in Uzbekistan?

CYBER BOOST is the official partner. We supply the gateways, design the OT/IT segmentation, connect them to historians and the SOC, and support you in Russian and Uzbek.

← All vendors: OT / IoT Security

Vendors in the OT / IoT Security category.

REQUEST

Request a Waterfall demo

We reply within one business day.