Safety software KontronAIShield®

monitoringdata acquisition and analysisreporting

Overview
KontronAIShield is an AI-driven industrial firewall appliance and endpoint protection solution designed to secure industrial networks, embedded systems and networked infrastructures. It provides automated threat detection, network filtering and incident reporting without modifying existing systems.

Cybersecurity Challenges
Traditional firewalls and signature-based endpoint solutions struggle in dynamic industrial environments with changing IPs, encrypted traffic and modern protocols. Static rules and manual policies are difficult to scale and may fail to detect evolving attack behaviors.

Solution Overview
KontronAIShield applies AI-based security to automatically detect, evaluate and prevent threats at both network and endpoint levels. The solution minimizes manual configuration and reduces operational workload for IT and OT teams while maintaining continuous protection.

Components of the KontronAIShield

• Security Operations Center: central monitoring and logging platform for compliance and real-time incident reporting.
• KontronAIShield App: lightweight security application for KontronOS edge devices that monitors anomalies and reports threats; suitable for embedded systems without a network filter.
• KontronAIShield Appliance (AI Box): inline network filtering appliance placed between devices and the network to filter threats, detect anomalies, block malicious traffic and forward incidents to the SOC.

Key Benefits

• Zero-Touch Provisioning: plug-and-play deployment with no manual firewall or endpoint rule configuration.
• AI-based Threat Detection: machine-learning analysis for network and endpoint threats, including encrypted traffic handling without DPI.
• Real-Time Protection: early detection and prevention of attacks at both network and endpoint layers.
• Adaptive Firewall: dynamic AI-driven filtering that adapts to current threat conditions rather than relying on static rules.

Technology Highlights

• AI-based firewall, intrusion detection and threat prevention capabilities.
• Early flow detection to block harmful connections before establishment.
• No certificate exchange or additional administrative overhead required for deployment.
• Designed for complex, heterogeneous industrial OT networks and continuous operation.
• Suitable for handling encrypted traffic without deep packet inspection.

Compliance & Certification
KontronAIShield uses certified hardware and software components and is designed to meet long-term regulatory requirements.

• RED compliant (EN 18031)
• CRA compliant (EN 304-626, EN 304-636)

Application Scenarios

• Machine builders & OEMs: integrated security for machines and production lines without modifying HMIs or soft PLCs.
• Embedded & consumer devices: integration on separate boards or inside controllers; suitable for retrofit projects.
• Healthcare & regulated environments: secure operation of networked devices that cannot be replaced or modified.
• IT & infrastructure protection: centralized protection for buildings, offices and server racks via an appliance.
• Docker-based systems: protection of containerized environments where standard security mechanisms are intentionally exposed.

Technical specifications

• Product type: AI-driven industrial firewall appliance and endpoint protection solution.
• Deployment options: KontronAIShield App for KontronOS edge devices and AI Box appliance for inline network filtering.
• Primary functions: AI-based IDS, network filtering, endpoint anomaly detection, threat prevention, incident reporting to SOC.
• Provisioning: zero-touch, plug-and-play installation without manual firewall rules.
• Traffic handling: AI analysis capable of handling encrypted traffic without DPI.
• Detection: early flow detection to block harmful connections before establishment.
• Management: central reporting to a Security Operations Center for compliance and incident tracking.
• Operational design: built for continuous operation in industrial environments and heterogeneous OT networks.
• Certifications: RED (EN 18031) and CRA (EN 304-626, EN 304-636) compliant.