Security and compliance
A security tool should never become your weakest point. ZWatch is offline, read-only and encrypted by design, and maps every finding to the frameworks your auditors use.
Secure by design.
Fully offline
Runs without internet access. Threat intelligence and updates arrive as packages you install.
Read-only by design
Never needs administrator or write rights on your devices. Changes are always made by your team.
Encrypted at rest
Configuration backups and stored data are encrypted on disk.
No stored passwords
Domain passwords and password hashes are never saved or cached anywhere.
Your logs, kept
All logs stay available, and a full log disk never stops the platform.
Licence bound to your devices
Licences are tied to your own devices, so a copied appliance will not run elsewhere.
Ready for your next audit.
Each finding links to the controls it affects. Coverage is tracked per control, and evidence exports are ready when your auditors ask.
- CIS Controls
- ISO/IEC 27001
- NIST CSF
- MITRE ATT&CK for incidents
| Control | Requirement | Coverage | |
|---|---|---|---|
| CIS 4.4 | Firewall rules restricted to needed services | 72% | |
| ISO/IEC 27001 A.8.20 | Network security controls | 81% | |
| NIST CSF PR.AA | Access is limited and reviewed | 88% | |
| CIS 8.2 | Audit logs collected and kept | 100% |
See ZWatch on your own network.
Ask for a trial licence and we will help you connect your first devices.