One-way was never enough.
Demand more from your data diodes with Data Diode+
Hardware-enforced one-way transfer plus inspection that proves what crosses.
the Shift
The definition froze. The threat didn’t.
For twenty-five years, the diode did one job: data moves one way and nothing comes back. It guaranteed direction and never asked what crossed.
Then attackers stopped targeting the boundary and started hiding inside the data that crosses it. Isolated networks now feed cloud analytics and AI pipelines, and the threats followed.
The question is no longer which way data moves, but what moves.
Direction was the whole job in a quieter era. Now the question is what else your diode can do.
The Solution
Introducing Data Diode+
Hardware-enforced one-way transfer plus inspection that proves what crosses. It sits between a traditional diode and a full cross domain solution, so you get more assurance than separation alone without the cost and complexity of a CDS.
- Cross Domain Solution: Full validation of data, built for nation-state-grade assurance, with the accreditation rigor and depth that classified and high-consequence environments require.
-
Data Diode+: Hardware-enforced one-way transfer plus inspection that proves what crosses. More assurance than separation alone, sized for one-way flows that don’t need the full scope of a CDS.
- Traditional Data Diode: Strictly one-way transfer that guarantees direction and nothing else. It never asks what crosses, so data-borne threats pass untouched.
Data Diode+ adds an attendant at the gate.
Think of the spikes at the rental-car exit. Drive the wrong way and the car stops. That is a basic data diode today: it enforces direction and nothing else.
Data Diode+ adds an attendant at the gate. The spikes still enforce direction, and the attendant confirms that what leaves is what should leave. Inspection scales with risk, so you decide how much each flow gets.
The Maturity Ladder
Not every flow needs a full cross domain solution. The maturity ladder shows how assurance grows, from hardware-enforced one-way transfer to the most exhaustive data validation. Data Diode+ spans rungs 2 through 4, the productive middle, where each flow gets the inspection its risk calls for.
“One-way or two-way?” was never the real question.
Both need the same layered inspection. The better question: how much inspection does each flow need?
The techniques behind the “+”.
Multiple layers work together. Use as many as each flow demands.
Protocol filtering and verification
Confirms traffic uses a valid, in-specification protocol at the network layer. Users notice nothing.
Known-good verification (CDR) over known-bad screening
Content disarm and reconstruction proves a file matches its format, then rebuilds it clean. Antivirus-style detection blocks recognized threats. It catches only what has already been seen.
Non-bypassable by design
Inspection built into the diode sits in the only path data can take, so nothing skips the check.
From static plumbing to an active, accountable control point.
What you get with Data Diode+
Hardware-enforced direction, plus the inspection to back it up.
- “One-way or two-way?” was never the real question. A one-way flow removes the return path, so nothing can call home. A two-way flow gives an attacker a channel for command and control. Both need layered inspection, so you choose how much each flow gets.
- Sensitive flows get every check. Low-risk flows get a few.
Owl's Products that power Data Diode+
Owl Talon One™
A U.S. Government-evaluated Protocol Filtering Diode with FPGA-based protocol filtering at up to 1 Gbps. Choose PCIe, 1U, DIN-Rail, or Bidirectional for OT-to-IT, logging, and telemetry flows.
Discover Owl Talon One
Owl Talon Torrent®
U.S. Government-validated as a Protocol Filtering Diode. It enforces a protocol break, validation, and reconstruction in hardware at up to 100 Gbps, for bulk and high-speed mission data.
Discover Owl Talon Torrent
Owl Incident Response Diode™
A portable Protocol Filtering Diode that gives investigators a one-way, protocol-filtered path for collecting data off compromised endpoints.
Discover Owl IRDReady to take the next step in securing your networks?
Not sure which solution fits your use case?
We’re here to help you find the solution that best meets your needs. Provide us with as much detail as you can, and we’ll take it from there.
You can also reach us by phone at +1 (410) 290-1411