Security and assurance
Secure by design, independently assured
The sensor is the part people worry about, so we built it to be boring to attack and had that independently assessed. Nothing listens on it, and everything it sends goes outbound to a portal that belongs to you alone.
Four layers of control
Every arrow that crosses your network boundary points outwards. That answers most security reviewers' first question.
Nothing to connect to
No inbound access and physical ports disabled. Storage is encrypted and unlocks only on the network, so a sensor taken off-site can't be read.
Outbound only
Sensors and agents report outbound over TLS. Management sessions are encrypted and started by the device, so no inbound firewall rules are needed.
Your sign-in, your rules
Single sign-on with your identity provider, such as Okta or Entra ID. Role-based views, and access restricted by source IP or VPN.
A Cloud Unit per client
Each client has a dedicated Cloud Unit, with its own portal and databases. No shared data.
Certification
IASME IoT Cyber Assurance Level 1
IASME IoT Cyber Assurance evaluates a manufacturer's security controls for connected devices and their associated services. Level One of the Assurance grade covers all 13 provisions of ETSI EN 303 645.
| Device | Continuous Network Assessment |
|---|---|
| Manufacturer | Rossi Networks Limited |
| Scope | Devices, hub, apps and associated cloud services |
| Standard | IASME IoT Cyber Assurance Standard v1.3, Level 1 |
| History | Certified for the last 3 years, subject to continuous assessment and independent annual review |
Aligned with all 13 provision categories of ETSI EN 303 645, the IoT Security Foundation framework, the PSTI Act and Secured by Design.
Certificate details are available on request.
Our organisation
Cyber Essentials certified
Rossi Networks Limited, which provides CNA, is certified under Cyber Essentials, the UK government-backed scheme that helps organisations protect themselves against the most common cyber attacks.
Certificate details are available on request.
Your data
Kept 90 days by default
Monitoring data is retained for 90 days. Longer retention is available.
Where it lives
Your Cloud Unit is hosted in the United Kingdom, or in your own private environment if you prefer.
Your own environment
Prefer to keep monitoring data in your own hosting? We can manage a Cloud Unit in your private environment.
Who processes what
For monitoring data you are the controller and we are the processor. See the service privacy notice and sub-processors.
Trusted by UK central government through our trusted partner. Tell us which assurance frameworks your procurement asks for and we'll map our controls to them. Contact us.
Prove it on your own network
Six weeks, your most-complained-about office, the apps your people can't work without, and success criteria you agree up front.