BlastWave

BlastWave is the developer of cybersecurity systems designed to protect virtual infrastructures and high-value assets. The company's system delivers non-addressable, edge-to-edge encrypted network and security, segmentation, policy management, and access controls. The company also works to prevent cyber threats and protect critical infrastructure through a reduced attack surface. The company was founded in 2018 by Tom Sego and is headquartered in Mountain View, California.

BlastWave's solution, known as BlastShield, is a software-defined perimeter solution that works to render protected assets invisible to malicious actors through a password-free, multi-factor authentication process and renders some protected systems undetectable by scanning and fingerprinting tools, hiding assets from malicious actors.

BlastWave suggests the company's BlastShield solution is purposely built to provide security for infrastructure, including in Industrial IoT, secure surveillance, and military and government scenarios. For Industrial IoT scenarios, BlastShield is capable of creating a virtual, isolated, air-gapped network for IoT devices and hiding an Industrial IoT deployment from the internet, while offering legacy system protections and easy creation of policies for remote access.

For secure surveillance scenarios, BlastShield is intended to deploy in-line in a surveillance network to make the network invisible to would-be attackers and eliminate the risk of accidental or malicious content leakage. While for military scenarios, BlastShield is intended to offer a solution to help secure remote assets and provide secure remote command and control of applications where connectivity, security, and network reliability are critical.

BlastShield INVISIBLE is a version of the software-defined BlastShield solution, offering a zero-trust and zero-configuration solutions capable of scaling across IT and OT environments. This includes a self-organizing network that frees an organization from needing to develop configurations; it is capable of cloaking users, OT devices, legacy systems, and applications. Furthermore, BlastShield INVISIBLE offers a one-touch access control across an entire network.

The solution is capable of working in hybrid cloud environments, is capable of working on host agent or in-line to protect on-premise applications, can be embedded or virtualized for virtualized environments, and can run on bare metal for legacy and OT environments.

BlastWave's BlastShield SD-VPN is a zero-trust, zero-configuration VPN solution offering users a simplified installation, providing one-touch access control, and is, according to BlastWave, immune to VPN exploits, through the use of encrypted transport.

BlastWave's zero-configuration development means that users are able to deploy the SD-VPN without need for a network, firewall, or DNS configuration. It requires a one-time cryptographic registration code to verify the user or endpoint, offers automatic discovery or new users or endpoints, is capable of self-organizing, and works to protect new users or endpoints.

VMShield is intended to be deployed in ESXi environments and works to create an invisible management plane for VMware, working to cloak vCenter and critical VMware management systems in order to protect those systems from unwanted access. VMShield is intended to be deployed as a lightweight software running on a single virtual machine while offering advanced protection against unwanted access, malware delivery, and malware propagation.

This includes offering a secure, invisible management plane for vCenter, creating a virtual layer to render virtual machines invisible from malicious actors while also offering a management plane for vCenter and ESXi. VMShield also offers deployment as an in-line VM image, in order to protect vCenter and VM guests and to help provide real-time micro-segmentation and access control.