TroutTrout
· You need the proof, not the project.

Your insurer, your customers or CMMC now ask how your machines are protected. The usual answer is a network project: long, complex, with downtime. Nobody approves that, so the risk stays.

Cyber insurance → Segmentation

Customer audit → Access control

CMMC → Evidence

· Install Access Gate on site.

How Access Gate Starter installs on your network.

Access Gate arrives preconfigured from a capture of your own network, so nobody spends days building it from scratch. Plug it in. Nothing changes on the machines.

  1. 01

    See your network.

    Record a few minutes of plant traffic, up to 500 MB, and drop it into our network analyzer. It maps every machine and flow, in your browser.

    Open the analyzer
  2. 02

    Order it, preconfigured.

    Pay by card, then send us the map from the analyzer, not your raw traffic. It ships with your policy already loaded.

  3. 03

    Plug it in.

    Plug and play on your existing switch. It starts in a dry run.

  4. 04

    Protect the line and prove it.

    Add one route on your router: under a minute. Then export the inventory, policy and logs your insurer, customer or assessor asks for.

· Inside Access Gate Starter

Small box. Full view of your plant.

Small enough for any cabinet.

Fanless, four network ports. Preconfigured before it ships.

Access Gate Starter appliance: a compact fanless box with four network ports

Every machine, named.

Built from the traffic itself, with no scanning.

Access Gate asset inventory: each machine with its address, name, traffic and protocols

Who reaches what, in one table.

Allow a machine, block the rest.

An Access Gate enclave: a permission matrix allowing the pump HMI to reach the controller over Modbus

Audit proof, exported.

One PDF report, control by control.

An exported Access Gate audit report: controls in place, each marked conformant or not, with the evidence behind it
· One price to start, no project.

Access Gate Starter price and what is included.

One plant, one simple price. Cancel anytime after the first 2 months.

$750to start

The appliance, preconfigured for your plant, and your first 2 months.

Then $399 per month.

US only. Paid by card.

What you get

  • One plant, up to 200 machines
  • A list of every machine on the network
  • Your machine vendors reach one machine at a time, only when you allow it, and every session is recorded
  • Protection between your network zones
  • Encrypted traffic to and from your machines
  • CMMC controls, kept on premise
  • Logs and reports for your auditor
· No risk to try it.

What if it does not work for you?

  • Nothing is blocked at first.

    It runs in a dry run until you approve the rules.

  • Undo in one step.

    Remove the one route on your router and traffic goes back to how it was.

  • Cancel anytime.

    After the first 2 months. Your network goes back exactly as it was.

More than 200 machines or several plants? See the larger plans.

Not sure which fits? Talk to a Trout engineer.

· Deployed during a coffee break.

A large manufacturer in North Carolina protected a running production line in under a minute.

<1 min

Production never stopped.

How they did it, in three steps.

  1. 01

    They saw their network.

    They got an inventory of every machine on the line and saw who talks to what. They reviewed it and approved it, with nothing blocked.

  2. 02

    They plugged it in.

    They connected Access Gate to their existing network. Nothing changed for the machines or the line.

  3. 03

    They switched it on.

    They changed one rule on their existing router to send this production line through Access Gate. No IP or VLAN changes. The switchover took under a minute.

· Watch it

Manufacturing cybersecurity, without downtime.

Access Gate on a plant network.

A short film on how Access Gate protects manufacturing networks without stopping production.

· Not ready to order?

See your network first, free.

Drop a capture of your plant network into our analyzer. You get every machine, how IT and OT connect, proposed zones and the findings that matter.

How to record a capture
Open the network analyzer Record a few minutes of plant traffic, up to 500 MB.

Your capture never leaves your browser. Nothing is uploaded.

No capture yet? Open the analyzer and explore the demo plant, or send this page to your IT, engineering or ops team.

Questions about Starter.

$750 to start, which covers the appliance and the first 2 months. Then $399 per month, and you can cancel anytime after the first 2 months. You can also buy it outright for $6,800, paid once. US only, paid by card.

Access Gate helps with the NIST SP 800-171 families that sit at the network: access control, identification and authentication (MFA at the gate), audit and accountability (a log of every connection), and system and communications protection (separating zones and encrypting traffic). It runs on premise, so the evidence stays on your site. Your assessor decides what it satisfies in your environment. See CMMC compliance.

A capture is a file that records the traffic on your network, usually a .pcap. You record it from a mirror port on your switch, or from a laptop plugged into one, with Wireshark or tcpdump. Record a few minutes of normal production, up to 500 MB, from a mirror port on the OT or line switch rather than the core uplink. Our guide has the exact commands. Then drop it into the network analyzer: it runs in your browser and nothing is uploaded.

No machine is re-addressed or rewired. You plug Access Gate into the existing network, and when you are ready you add one route on your switch or router. Removing that route undoes it.

No. Access Gate starts in a dry run, so nothing is blocked until you have checked the rules. A large manufacturer in North Carolina protected a running production line in under a minute, and production never stopped.

One plant with up to 200 machines. Starter works with the VLANs you already have: Access Gate draws the zones from your map and protects the traffic between them. You also get an inventory of every machine, secure remote access for your team and vendors through one gateway, encrypted traffic, the CMMC controls on premise, and audit logs. More plants and machine-to-machine protection inside a zone are available on the larger plans.

Yes. You get an inventory of every machine, the policy that is enforced and a log of every connection. Those are the documents insurers, customers and assessors ask for.

Yes, any time after the first 2 months. The route comes off and your network goes back exactly as it was.

· Start this week

Protect the line without a project.

See your network for free, then protect it yourself.