GuarDiode | Managed Data Diode

What is Nexor GuarDiode?

A combined data guard and data diode delivering assured, accredited protection for classified and critical networks.

Nexor GuarDiode ensures that data transfers, whether import or export, occur securely, preserving the integrity and confidentiality of sensitive information and critical systems.

Whether you need Nexor’s GuarDiode certified to EAL7+, the highest NATO data diode certification available, or certified to NCSC CAPS, Nexor’s GuarDiode is the ideal solution for you. Nexor GuarDiode provides assured control of information movement between networks of differing classifications.

How Nexor GuarDiode works

Nexor GuarDiode combines data guard, managed proxy, and data diode technologies to deliver assured control of information exchange between domains.

The customisable guard layer inspects and sanitises all inbound data, applying configurable policies to remove malicious code, active content, and unauthorised information.

The proxy architecture manages transfer integrity and auditability, reconstructing data to maintain reliability and compliance.

Finally, the hardware-enforced data diode ensures unidirectional flow, physically preventing any return path for threats.

This layered approach provides verifiable separation, assured performance, and confidence in the protection of classified and critical networks.

GuarDiode variants for assured information exchange

GuarDiode File

Enables the secure import or export of file-based information between networks of differing classification.
The File variant enforces policy-controlled, unidirectional transfer to prevent data leakage while maintaining integrity and auditability.

It is suited to environments requiring high-assurance file sharing or ingestion of data from external or coalition systems.

GuarDiode Camera

Allows authorised viewing of live or recorded camera streams from within a secure domain while maintaining complete one-way isolation.

By ensuring that video feeds cannot transmit data back across the boundary, the Camera variant supports safe situational awareness, monitoring, and surveillance operations without compromising internal network security.

GuarDiode Edge

Delivers the same trusted file-transfer capability as the GuarDiode File variant in a compact, space-efficient form factor.

Optimised for remote, tactical, or space-limited installations, GuarDiode Edge provides assured data protection and full operational performance where size, weight, and power constraints are critical.

Nexor GuarDiode is available in a range of variants designed to meet the specific operational and environmental requirements of Defence, Government, Law Enforcement and Critical National Infrastructure deployments. Each provides assured protection and accredited separation, tailored to distinct mission needs.

Why you can trust Nexor GuarDiode

Trust in Nexor GuarDiode is founded on independently verified assurance, sovereign engineering, and proven protection against the most common threats to cross domain data exchange.

Mitigates malware attacks during data transfer

Nexor GuarDiode mitigates malware risks by combining content inspection, transformation, and Content Disarm and Reconstruction (CDR) technologies.
Each file is inspected and sanitised before transmission, removing malicious code, macros, and embedded links that could compromise a secure domain.
This proactive, policy-controlled process ensures that only verified data is permitted across the boundary, maintaining the integrity and confidentiality of critical networks.

Automated, auditable data transfer

GuarDiode automates the movement of information across the diode, removing the need for manual data handling and reducing the risk of human error.
Automated transfer supports consistency, accuracy, and predictable performance, essential in high-assurance environments where reliability and traceability are paramount.
All transfers are logged and auditable, ensuring full visibility for security and compliance teams.

Independently assured and certified

Nexor GuarDiode has been independently evaluated to Common Criteria EAL7+, the highest assurance level recognised by NATO for data diode technologies.
Configurations are also available that align with the NCSC CAPS scheme, supporting deployment across UK Government and Defence networks.
Each GuarDiode variant is designed, built, and supported in the United Kingdom under accredited engineering processes, providing verifiable assurance and a sovereign capability trusted by the UK and its allies.

Download your free copy of the benefits sheet

Learn about Nexor GuarDiode from our free brochure. Simply tell us where to send it and we will email it to your inbox

I consent to the Privacy Policy

Benefits of Nexor GuarDiode

Nexor GuarDiode delivers tangible operational benefits for Defence, Government, Law Enforcement and Critical National Infrastructure organisations that require trusted, high-assurance data exchange between secure and less-secure domains.

Simplified management and assured operation

The integration of guard, proxy, and diode technologies within a single platform reduces system complexity and maintenance overhead through a clear, structured interface.

This approach improves consistency, reduces the risk of configuration errors, and simplifies long-term sustainment in accredited environments.

Enhanced operational performance

Optimised data handling and policy enforcement deliver predictable throughput and low latency, even during deep content inspection.

This ensures that information moves securely and efficiently between domains, enabling timely decision-making and continuity of operations in mission-critical environments.

Proactive threat prevention

By applying content inspection, transformation, and Content Disarm and Reconstruction (CDR) technologies at the boundary, GuarDiode neutralises malware and embedded threats before they can reach secure networks.

This proactive security model prevents compromise while maintaining the integrity and confidentiality of high-value information.

Key features of Nexor GuarDiode

Each Nexor GuarDiode system incorporates a set of assured capabilities designed to maintain data integrity, operational efficiency, and verifiable separation between networks of differing classification.

Policy-controlled content inspection and sanitisation

Utilising transformation and Content Disarm and Reconstruction (CDR) techniques, GuarDiode inspects, cleanses, and validates data before transmission.

This ensures that all content is free from active code, macros, or malicious payloads, providing verifiable assurance that only authorised information crosses the domain boundary.

Managed and auditable transfer control

The integrated proxy layer manages, verifies, and logs each transfer, maintaining full auditability and ensuring complete traceability for accreditation and compliance purposes.

This mechanism preserves data integrity while simplifying monitoring and validation processes for system administrators.

High-performance, resilient data throughput

Optimised transfer processes and networking support high throughput with predictable latency and built-in redundancy.

GuarDiode maintains stable performance even during deep inspection operations, ensuring that operational tempo is never compromised.

Certified one-way data flow assurance

At the hardware layer, GuarDiode enforces unidirectional data transfer using certified data diode technology.

This guarantees physical separation between networks and eliminates any potential reverse data flow, a critical requirement for systems operating at classified or sensitive levels.

How Nexor GuarDiode differs from Nexor Data Diode

Both Nexor GuarDiode and Nexor Data Diode deliver trusted unidirectional data transfer. In addition, GuarDiode extends this assurance through integrated guard and proxy capabilities that add inspection, control, and policy enforcement for multi-domain environments.

Common Features

Unidirectional Data Flow:
Both the Nexor GuarDiode and Nexor Data Diode ensure data flows in one direction only, preventing unauthorised access and data leakage. This unidirectional flow is crucial for protecting sensitive information in high-threat environments.

High-Level Security:
Both solutions are built to provide robust protection against cyber threats, ensuring the integrity and confidentiality of transmitted data. They are suitable for use in critical sectors such as defence, secure government facilities, and law enforcement.

Unique Features of Nexor GuarDiode

Advanced Content Inspection and Sanitisation:
The GuarDiode includes Transformation and Content Disarm and Reconstruct (CDR) capabilities. This means it can inspect and sanitise files, removing potential threats such as malicious code, macros, and harmful links before they are transmitted. This proactive security measure significantly reduces the risk of data breaches and malware infections.

Integrated Security Solutions:
GuarDiode integrates certified data diodes with a secure content checking framework, workflow control, quarantine, and optional third-party security software. This comprehensive integration ensures only safe, verified data passes through, providing a higher level of cross-domain protection.

Optimised Performance and Usability:
With features like an enhanced Samba pull process for faster transfers and bonded link network connections for redundancy, GuarDiode ensures efficient and reliable data transfers. Its user-friendly interface, clear dashboard graphics, and comprehensive administrative guides make it easy to manage and secure the system.

Download your free copy of the benefits sheet

Learn about Nexor GuarDiode from our free brochure. Simply tell us where to send it and we will email it to your inbox

I consent to the Privacy Policy

Operational use cases for Nexor GuarDiode

Nexor GuarDiode is trusted across Defence, Government, Law Enforcement and CNI to enable controlled, accredited information exchange where data integrity, confidentiality, and assurance are essential. The following examples illustrate how GuarDiode supports real-world operational requirements.

Importing data from untrusted or open internet sources

Challenge:

Law enforcement and intelligence agencies often need to gather open-source intelligence (OSINT) and digital evidence from public or uncontrolled networks. These sources can introduce significant cyber risk if connected directly to secure systems.

How GuarDiode helps:

GuarDiode provides a secure, unidirectional pathway to import data from the internet or untrusted domains into sensitive networks. Through integrated content inspection and Content Disarm and Reconstruction (CDR), all imported material is sanitised and validated before entry. This ensures agencies can safely exploit valuable online intelligence without compromising internal systems or evidential integrity.

Secure data exchange between government organisations

Challenge:

Government departments frequently exchange classified or sensitive information with partner agencies or contractors. These transfers must comply with strict security policies and maintain domain separation.

How GuarDiode helps:

GuarDiode enforces unidirectional or policy-controlled data flow between networks, ensuring that no unauthorised content or hidden payloads traverse the boundary. Its inspection and policy enforcement mechanisms maintain compliance with departmental and cross-government assurance frameworks, protecting both the sender and the recipient from data leakage or compromise.

Controlled export of redacted or sanitised information

Challenge:

Defence organisations and operational commands often need to share reports or situational data with allies and external partners while ensuring that classified information is not released.

How GuarDiode helps:

GuarDiode enables policy-driven export with integrated filtering and redaction controls. Sensitive content can be automatically removed or quarantined before transmission, ensuring that only authorised, releasable information is shared. This capability allows Defence users to collaborate effectively while upholding national security and protecting classified material.

What our customers say

We achieved our primary objective of finding a proof of concept architecture that was technologically feasible and simple to implement.

A European Police Force