With its advanced architecture and robust multi-layer security, the Owl Talon One (OTO) Data Diode Card sets a new standard for secure, low‑SWaP one‑way data transfer. Consolidating hardware into a single PCIe card, it delivers up to 1 Gbps of unidirectional, protocol‑filtering throughput while maintaining necessary two‑way communications via dedicated proxies. This approach safeguards critical assets, simplifies deployment in constrained environments, and raises the bar for high‑performance network isolation.
Owl Talon One™
Owl Talon One protocol filtering diodes provide absolute separation between source and destination networks to prevent data leakage. Ensure long-term reliability for critical operations and meets stringent compliance and security standards required in regulated industries and government agencies.
One Card, Every Environment. Zero Compromise, By Design.
Owl Talon One Protocol Filtering Diodes bring hardware-enforced, one-way data transfer into a compact PCIe form factor — purpose-built for flexible deployment across high-assurance critical infrastructure, defense & intelligence missions.
EAL4+ Certified. U.S. Government-Validated. Hardened at Every Layer.
U.S. Government-validated, EAL4+-certified protection in a single PCIe card — with AIDE integrity monitoring, hardened BIOS, and secure boot to eliminate the attack surface at every layer, so your team deploys with confidence from day one.
Deploy With Confidence: From the Tactical Edge to the Power Grid.
From embedded edge systems and workstations to air-gapped enclaves and forward-deployed environments — Owl Talon One installs where full appliances can't, keeping critical operations moving without infrastructure overhaul.
Multiple Simultaneous Protocols on a Single Device.
Owl Talon One supports a broad range of protocol types — from file transfer to syslog, database replication to industrial OT protocols — so your team spends less time on custom integration and more time on mission execution across IT, OT, and classified environments.
When Firewalls Fall Short: How Owl Talon One Outperforms for High‑Assurance One‑Way Flows
Owl Talon One is built for environments where you must move data out—but can’t afford to open a path back in. Unlike firewalls, which still rely on software rules to manage two‑way traffic, Owl Talon One uses a hardware‑enforced one‑way path and protocol filtering at the FPGA-level to protect OT and can’t‑fail networks while safely delivering the telemetry, logs, and mission data your teams depend on.
Certified for high-assurance Networks
Rigorously Tested. Globally Trusted.
Owl Talon has been independently evaluated against rigorous standards for one‑way security, giving OT and mission owners confidence that its hardware‑enforced one‑way architecture and software stack have been formally scrutinized—not just claimed in a datasheet.
Certifications include Common Criteria evaluation at EAL4+‑class rigor for design and implementation assurance, U.S. government evaluation and approval as a protocol filtering diode for one‑way security use cases, and alignment with relevant U.S. government and defense security requirements for cross‑domain and high‑threat network environments.
Owl Talon One Deployment Options
Owl Talon One™: 1U
Owl Talon One: 1U is a compact, rack‑mountable protocol filtering diode, ideal for datacenters and control rooms. The Owl Talon One: 1U all-in-one-appliance supports simultaneous one‑way protocols, throughput up to 1 Gbps, and high‑availability options for critical infrastructure and defense network‑to‑network transfer worldwide.
Download the Datasheet
Owl Talon One™: DIN-Rail
Owl Talon One: DIN-Rail is a hardened protocol filtering diode ideal for space‑ and power‑constrained OT environments. With Owl Talon One: DIN-Rail, users can secure one-way telemetry, historian, and sensor data flows from substations, plants, and remote sites into monitoring, SOC, and analytics environments.
Download the Datasheet
Owl Talon One™: Bidirectional
Owl Talon One: Bidirectional features paired one‑way paths to enable tightly controlled, policy‑enforced bidirectional communication. Ideal for secure remote access, updates, and monitoring, Owl Talon One: Bidirectional maintains strong separation while allowing limited return channels for administration and mission support.
Download the DatasheetWhy it Works: SOM Technology with Multi-Layer Security
Be the First to Know What's Coming Next.
Stay ahead of what’s next for Owl Talon. Sign up for product update alerts and we’ll send you release announcements, enhanced feature rollouts, important patches, and critical security upgrade information as soon as they’re available.
Latest Release: Stronger One-Way Security
Owl Talon v3.4.0.0 Raises the Bar Again for One-Way Security
Owl Talon v3.4.0.0 builds on the Owl Talon platform with new protocol options, stronger controls, and operational improvements that help security and operations teams protect can’t‑fail networks while still getting the data they need out. Use it to standardize one-way data flows, simplify day‑to‑day management, and support more mission and monitoring use cases without adding risk.
- Expanded support for additional OT/IIoT and enterprise protocols to cover more plants, platforms, and applications
- Enhanced TLS, authentication, and policy options for regulated and high-assurance environments
- Performance and efficiency improvements to support higher throughput and more demanding data flows
- UX and management refinements that simplify configuration, monitoring, and ongoing operations
Read the blog for more information.
When Your One‑Way Security Has to be Right
For decades, Owl has focused on hardware‑enforced one‑way security for the world’s most demanding OT, defense, and critical infrastructure networks—where getting it wrong is not an option. When you’re ready to move beyond firewalls and basic diodes, our engineers can help you map the right Talon One form factor and architecture to your environment, fast.