No cable needed.
An attacker may reach a device through its radio connection without passing through your network firewall.
RF & WIRELESS PROTECTION
Your firewall can't hear radio.
Findavi can.
Cameras, badge readers and controllers can communicate over cellular and other radio links outside your network firewall. Findavi watches your network traffic through a mirror port, and the radio links in range of an RF switch at your site. For cellular modems it can’t hear, our team walks the site. It finds devices, detects threats and takes action under your rules. Then it checks that the threat was stopped and the device still works.
THE PROBLEM
Radio links need security checks, too.
Your firewall monitors traffic that passes through it. A pump controller’s cellular modem, a door reader’s badge connection or a sensor’s radio link can take a different path. Those connections need to be monitored too.
Invisible to network monitoring.
A separate radio connection can carry traffic that your network security tools never see.
Responsibility can fall between teams.
IT watches computers, physical security watches doors, and responsibility for the radio links can fall between teams.
WHAT FINDAVI LISTENS TO
What Findavi watches, around the clock
Cellular modems and routers.
When a controller, alarm panel or kiosk with a cellular modem is also on your network, Findavi sees it there. It alerts your team when the device drops off or acts differently, and it can cut the device off from the rest of your network.
RFID badges and door readers.
The cards and tags your people use every day. Findavi protects supported RFID systems and checks that real employee badges and tag reads keep working.
Wireless links and radio gateways.
The radio links that carry data from sensors, meters and building systems back to the network. Findavi learns their normal activity and flags unexpected devices, connections and changes.
Wireless devices nobody listed.
Findavi flags wireless devices in range of the RF switch that show up where none were approved, including equipment missing from your inventory.
How it works, in four steps
An RF switch connects Findavi to the radio side of your site. A network mirror port provides passive network visibility. Findavi uses both connections to find devices, identify threats and respond. Your team approves where it connects and what it can do.
01 · Discover
Findavi records the devices and radio activity it finds in the areas it monitors. Each finding identifies the device and the team responsible for it.
02 · Harden
It points out the easy ways in: factory passwords, remote access left open, and devices anyone on the internet can reach. Internet-facing controllers were targeted in the water-sector incidents described in our threat guide.
03 · Detect
Findavi learns normal network and radio activity, detects unexpected connections and behavior, and records the evidence behind each alert.
04 · Respond
It responds within your rules, then checks that the threat was stopped and the device is still doing its job. If either check fails or evidence is missing, the issue stays open. Every action is recorded.
YOU STAY IN CONTROL
You decide how much Findavi does on its own.
Findavi monitors devices and radio links around the clock. Your team chooses observation, individual approval or autonomous responses within rules set in advance.
Observe
Findavi finds and reports. Your team makes every move.
Approve
Findavi proposes the fix and waits for a person to approve it.
Autonomous
Findavi acts within the device and action limits your team approves, then tells you what it did.
Start in Observe mode and allow more actions as you review the results.
PROVEN IN THE FIELD
A field assessment and a customer demonstration.
Energy campus
A 4G modem back door into a control screen found, plus remote-access tools open to the internet.
Customer demonstration
In a controlled demonstration on an operator's equipment, Findavi detected and stopped test attacks on the RFID system and on heating and cooling controls. These were demonstrations, not live incidents.
FITS THE SITE YOU ALREADY HAVE
How Findavi connects at your site.
On-site appliance.
Findavi runs on a dedicated appliance at your site, connected to your network and RF switch. Your team sets its access and operating rules.
Works with what you have.
Findavi monitors radio links and devices that need coverage alongside your existing security tools.
Listens, never jams.
Findavi listens to radio links. It does not jam or block the radio signals your devices depend on.
RF & WIRELESS / BOOK FIVE
The modem nobody listed.
Seven short chapters on the radio links that walk around your security, and how to close a risky path while the door keeps working.
CONTINUE WITH BOOK SEVEN / PRIVATE CELLULAR NETWORKS
When the second network reaches the plant.
Book Five covers links that go around the firewall. Book Seven follows a private cellular path into a power plant’s controls and examines what monitoring inside the plant could reveal.
Questions
Does this replace our firewall?
No. Keep your firewall in place. Findavi works alongside it to protect devices and monitor radio links outside its view.
Will it interfere with our radios, phones or Wi-Fi?
No. Findavi listens. It doesn't jam or block the channels your devices use.
Can Findavi hear cellular modems?
Not directly. When a device with a cellular modem is also on your network, Findavi sees it there and can cut it off from the rest of your network. A modem that talks straight to a cell tower is out of view, so our team finds those by walking the site and checking the hardware.
What do we need at our site?
Findavi connects to your network through a mirror port and to the radio side through an RF switch. We plan the setup with you during the blind spot assessment.
Which RFID systems do you support?
Findavi detects and responds to attacks on supported RFID systems, then checks that authorized badge and tag reads still work. We confirm coverage for your reader, badge technology and configuration during deployment planning.
Find out what's talking over the air at your site.
Your assessment report includes:
- A record of the devices and radio activity identified within the agreed scope
- Which ones are exposed, and why
- Prioritized findings and recommended next steps