[ PLATFORM // ON-PREMISES ]
Security for on-premises.
Agents + tunnels.
nnsec-agent on Linux and Windows, log forwarders over TLS 1.3, optional WireGuard fallback — same dashboard as cloud without shipping data to hyperscaler tools.
2k+
Agents
1.3
TLS
Opt
Air-gap
nnsec-agent · 2.4k events/min
What we assess
in On-Premises.
Platform-native domains — not a generic cloud checklist pasted from another provider.
Endpoint agents
FIM, rootkit detection, inventory.
Log forwarding
Syslog, Windows Event, JSON pipelines.
Network
Segmentation validation, exposed services.
AD / LDAP
Privileged group changes, Kerberoasting signals.
VMware / KVM
Hypervisor hardening checklist.
OT adjacent
Passive taps where allowed — no active scanning.
Backup
Immutability and offline copy verification.
Physical
Access control evidence for ISO audits.
Onboarding preview
from checklist.
Steps align with NNSEC_Onboarding_Checklist — full runbook generates after discovery wizard.
- 01
Architecture call
Map sites, zones, and log sources.
- 02
Install agent
Signed agent bundle from your NNSEC onboarding workspace.
- 03
Tunnel
TLS ingestion endpoint or WireGuard profile.
- 04
SIEM bridge
Optional forward to existing SIEM + NorthSec AI.
- 05
Playbooks
On-prem IR runbooks customized per site.
- 06
Offboard plan
Knowledge transfer + access revocation checklist.
Tools we deploy
and integrate.
Open-source and native cloud APIs — no proprietary agent required unless noted for on-prem.
Connector · Log forwarder over TLS 1.3; WireGuard tunnel as fallback per architecture doc.
Framework mapping
for On-Premises.
Evidence exports attach findings to auditor-friendly control IDs.
ISO A.12
Operations security
HIPAA
On-prem PHI systems
NIS2
Critical infrastructure
[ TIERS ]
Connector included by tier
| foundation · $3,500 | ☑ |
| growth · $5,000 | ☑ |
| scale · $8,000 | ☑ |
| enterprise · $12,000 | ☑ |
Customer story
Air-gap SOC online
Manufacturer streamed events without cloud egress to public internet.
Industrial
FAQ
Powered by Wazuh fork — source attribution provided with your signed agent bundle during onboarding.
Connect On-Premises to NorthSec AI
Full coverage · read-only · per-tenant KMS