Infrastructure software for networks that never touch the internet

Who it's for

Some networks never touch the internet: defence and government, critical infrastructure, factory floors, labs and regulated industry. Cloud-managed tools can't reach them, and the on-premises infrastructure software they relied on is being retired. SealGrid's products install inside the perimeter and run with no outbound connection, and Athena updates from an offline bundle you carry in. The network stays sealed; the tooling stays current.

Products

Why air-gapped endpoint management is different

Most modern endpoint tools assume a cloud: a vendor-hosted console, a licence server to call home to, updates pulled from the internet. On an isolated network each of those is a point of failure, or the reason the tool is never approved. SealGrid is built the other way round:

• Everything resolves locally. The Athena server, its database, its certificate authority, packages, session recordings and audit logs all live on your hardware. Agents connect outbound to your server only; there is no cloud relay.
• Licensing never calls home. A licence is a signed file checked locally: no activation call, no periodic check-in. If a licence lapses, the server keeps running, sign-in keeps working and agents keep reporting; only new work pauses until a renewal is installed.
• Patch visibility without the internet. Agents check for missing Windows updates against Microsoft's offline scan catalog, which you upload to the server.
• Updates you carry in. The Athena appliance updates from a bundle uploaded in the web console; HDT installs from a saved copy of the PowerShell module.

Frequently asked questions

Does Athena need an internet connection?

No. A default install has no outbound dependency: no telemetry, no licence check-ins, no update servers. It is designed to run indefinitely on a network that never touches the internet.

Which operating systems can it manage?

Windows, Linux and macOS endpoints. Software deployment, inventory and remote commands work on all three; the built-in screen share is Windows-only.

Can Athena help with the Secure Boot 2023 certificate update?

Yes. For every Windows machine Athena shows where it is in Microsoft's move to the 2023 Secure Boot certificates, with a progress checklist and what is blocking it, and lets you start or retry the update on one machine or many. Secure Boot 2023 in Athena.

How do we roll the agent out across a Windows domain?

From one PowerShell console. The Athena module reads computer accounts from Active Directory and deploys the agent to the machines you choose, by OU or across the whole domain.

How can we try it?

Start a hosted trial from the Athena page, a live instance with sample devices. Or download the appliance for VMware vSphere or Hyper-V; it ships with a built-in trial licence and needs no internet.

How is it priced?

Free for up to 25 devices with 5 admin accounts. Larger fleets are priced per managed device, monthly or yearly; see Pricing.

Is HDT really free?

Yes. The Hephaestus Deployment Toolkit is free on the PowerShell Gallery, with source on GitHub. For an air-gapped server, save the module on a connected machine with Save-Module and copy it across.

How we build

• Air-gapped first. No internet, no telemetry, no phone-home licensing. Everything works on an isolated network, indefinitely.
• Yours to run. Software and data stay on your hardware, inside your perimeter.
• Familiar models, modern engines. We keep the way administrators already work and replace what's underneath with something maintained.
• Proven on real machines. Features ship when they work on real hardware, not only in tests.

Contact

Evaluations, pilots and questions: support@sealgrid.ai. To try Athena online, use Try Athena.