The IoT-mini^TM will only use locally accessible network information protocols to obtain information about local devices to be profiled. As such, no data could be used to identify or attack any customer. The data would be useless without direct access to the network, and direct access to the network would allow access to this information anyway.

The IoT-mini^TM will connect to our CloudPortal® a minimum of every 5 minutes to access the updates and databases that help determine what tests to perform for a given device. There is no collection of packets or any potentially sensitive data in any way, not directly to the appliance itself or out to our CloudPortal®. Any data that is retained is stored in the geographic region of the customer’s choosing.

The IoT-mini^TM will attempt to communicate with devices to assist in device profiling and vulnerability detection. This communication is minimal, a small fraction of the traffic in comparison to network scanners, and done interatively to avoid any impact to the device or network.

These measures provide assurance to our customers and partners that we will not gather or maintain any of their sensitive or protected information in our systems and that we be safe on the network and to devices.

Safe on Devices: The IoT-mini^TM uses a proprietary, non-intrusive technique called PortSafe^TM Inspection. Unlike vulnerability scanners that can overwhelm and crash sensitive IoT devices, PortSafe^TM works iteratively and intelligently to understand the device and how to best test it. The result is that it will not interfere with devices as it does its discovery, identification, and vulnerability detection.

Safe on the Network: Unlike competitive solutions, the IoT-mini^TM does not use network TAP/SPAN ports, so there is no addition load on the switch to duplicate packets which can cause network performance issues. Also, the IoT-mini^TM generates only a small fraction of traffic vs. network scans.

The Benefit: Now you can safely and confidently discover and vulnerability test sensitive and resource-constrained devices that are excluded from intrusive vulnerability scans, without concern of crashing devices or causing network performance issues.

The IoTSecure IoT-mini^TM is a free IoT security tool that makes it fast and easy to address common IoT security challenges. The IoT-mini is fits in the palm of your hand and runs off USB power connected to any ethernet jack on the network.The IoT-mini^TM is completely automated. When you get your IoT-mini and connect it to the network, it will:

– Discover, track and identify IoT devices
– Safely detect IoT-specific vulnerabilities that vulnerability scanners often miss
– Summarize IoT inventory and vulnerabilities in the report

The IoT-mini^TM is also aware of any new devices that connect to the network. When new devices connect, the IoT-mini^TM will also begin to profile them to be identified and checked for IoT vulnerabilities. Also, there are no agents to install, no network TAPs, and there is no tuning.

The IoT-mini^TM will only use locally accessible network information protocols to obtain information about local devices to be profiled. As such, no data could be used to identify or attack any customer. The data would be useless without direct access to the network, and direct access to the network would allow access to this information anyway.

The IoT-mini^TM will connect to our CloudPortal® a minimum of every 5 minutes to access the updates and databases that help determine what tests to perform for a given device. There is no collection of packets or any potentially sensitive data in any way, not directly to the appliance itself or out to our CloudPortal®. Any data that is retained is stored in the geographic region of the customer’s choosing.

The IoT-mini^TM will attempt to communicate with devices to assist in device profiling and vulnerability detection. This communication is minimal, a small fraction of the traffic in comparison to network scanners, and done interatively to avoid any impact to the device or network.

These measures provide assurance to our customers and partners that we will not gather or maintain any of their sensitive or protected information in our systems and that we be safe on the network and to devices.