WAN

LAN

MGMT

DEC-1NanoPi R6S

PROCESSOR

RK3588S

MEMORY

8 GB

ETHERNET

2×2.5G + 1×GbE

IN STOCKShips in 3–5 business days

VaultGuardian DEC-1

Deterministic Egress Controller

Pre-configured hardware security appliance. Plug into your network, set your MAC address, go live. One year of firmware updates included.

$349per unit

QUANTITY

ADD-ON

DEC-1 × 1$349

First year firmware updatesIncluded

Extended updates (Year 2+)$99/yr starting Year 2

ShippingFree

Total due today$349

SSL EncryptedVisa / MC / AmexFree Shipping

What's in the box

NanoPi R6S

RK3588S octa-core, 8GB LPDDR4X, 32GB eMMC, 2× 2.5GbE + 1× GbE

VaultGuardian Firmware

Pre-installed and configured. 5-rule detection engine, web dashboard, JSONL logging.

USB-C PD Power Supply

65W USB-C PD adapter. Supports 5V/9V/12V/20V input. Universal (100–240V AC).

Quick Start Guide

Setup in 5 minutes. Network topology, MAC configuration, threshold tuning.

Technical specifications

PROCESSORRockchip RK3588S — 4× Cortex-A76 @ 2.4GHz + 4× Cortex-A55 @ 1.8GHz

MEMORY8 GB LPDDR4X @ 2133MHz

STORAGE32 GB eMMC (firmware + 180-day log retention)

NETWORK INTERFACES2× 2.5G Ethernet (RTL8125BG via PCIe) + 1× Gigabit Ethernet (RTL8211F native)

BRIDGE MODELayer 2 transparent bridge — no IP, no ARP, no IPv6, STP disabled

DETECTION ENGINE5-rule complementary detection: flood, drip, volume, idle, speed ceiling

DETECTION MODESSTANDARD, STRICT, VAULT

ACTION MODESLIVE (enforce), AUDIT (monitor only), TEST (simulate kills)

RESPONSE TIME< 1 millisecond from threshold breach to link severance

KILL METHODSoftware link down (ip link set eth1 down) — prevents filesystem corruption

LOGGINGJSON Lines format, buffered writes (60s flush), 180-day auto-retention

MANAGEMENTIsolated web dashboard on dedicated eth2 interface

FIRMWAREGo binary on Linux — memory-safe, single process, no external dependencies

POWERUSB-C with PD (5V/9V/12V/20V input), 65W adapter included

DIMENSIONS96.5 × 68 × 30 mm (with CNC metal case)

WEIGHT262g (with case)

OPERATING TEMP0°C to 70°C

CLOUD DEPENDENCYNone — fully offline operation

WARRANTY1 year hardware

Setup in 5 minutes

No software installation. No cloud account. No configuration files.

Connect WAN

Plug an ethernet cable from your router into the WAN port.

Connect LAN

Plug an ethernet cable from the LAN port into your backup server.

Access Dashboard

Connect to the management interface and open the web dashboard.

Configure & Go Live

Set your server's MAC address, tune thresholds in AUDIT mode, then switch to LIVE.

Free Shipping

Free standard shipping to the continental US. International shipping available at checkout.

1-Year Hardware Warranty

Full hardware warranty. If it breaks, we replace it. No questions, no hassle.

30-Day Returns

Not what you expected? Return within 30 days for a full refund. Run it in AUDIT mode first — no risk.

Stop exfiltration at the physics layer

Ships in 3–5 business days. Setup takes 5 minutes.

Learn More