Immutable Storage
WORM (write-once-read-many) storage that even ransomware cannot modify.
- S3-compatible API
- Object lock & retention
- Erasure coding
ViVeSec Box – Military-grade Data Protection
Data protection against ransomware
Data protection against ransomware
in a closed ecosystem
The immutable backup appliance that is physically and logically isolated – so ransomware cannot reach, modify or delete your data.
Common Criteria EAL2 evaluation – ViveSec Server 1.1.0 · Support for NIS2 technical controls · Eco footprint: 8 W
Technological innovation - The new generation of cybersecurity developed for the SME sector
One minute that shows it all
Learn about the structure of ViVeSec Box – closed system, immutable backup, recovery in minutes.
Why is classic backup not enough?
Modern ransomware attacks even backups. ViVeSec Box's answer to this threat is a physically and logically isolated, immutable backup appliance that the attacker cannot modify or delete.
- Immutable, read-only snapshots – even with compromised admin authentication
- Closed operating environment, minimized attack surface
- Forensic tracking and anomaly detection
- Built-in integrity checking (sha-256 + post-quantum signatures)
| Aspect | ViVeSec Box | Classic backup / cloud backup |
|---|---|---|
| Recovery after attack | ✓ In minutes, under control | Hours or days if the backup is affected |
| Delete resistance | ✓ Immutable, read-only | Can be modified by admin / attacker |
| Data sovereignty | ✓ Fully on-premise | Dependent on provider infrastructure |
| Audit and compliance | ✓ With downloadable evidence | Scattered logs, harder to prove |
The difference becomes critical when the risk is not theoretical, but a live incident.
Hardened OS, kernel ACL, air-gap – layered protection
ViVeSec Box is not a general-purpose server but a hardened appliance: protection applies at the level of the operating system, the kernel and network exposure alike.
Executing files blocked at the operating system level
-
01
The malware does not run
Even if infected files are delivered to the device during a cyberattack, the malware remains completely inactive: no `exe` rights, no interpreter, no execution context.
-
02
No lateral expansion
Malware cannot spread to the network through the ViVeSec Box – the device is both a physical and logical endpoint, not a springboard.
This is not a reactive defense, but a structural protection: what cannot run cannot harm.
Air-gap & insulation
Zero externally accessible interfaces on the physical device – no external admin interface, no remote SSH.
- Out-of-band management
- Network micro-segmentation
Compliance support
It supports the implementation of NIS2, GDPR and ISO 27001 technical controls. Organisational compliance depends on the entire operating environment.
- Detailed audit log
- RBAC + 4-eye principle
- Export of evidence
Six critical IT functions – In a single, closed device
ViVeSec Box is not just a backup appliance: it is an integrated cybersecurity platform that combines six business-critical functions beyond backup - with a unified architecture, unified audit logging, and unified access management.
Backup
Immutable, WORM-stored backup – even ransomware cannot modify or delete data. Version tracking, retention policy, Object Lock.
Encrypted file sharing
End-to-end encrypted file sharing and teamwork with internal colleagues and external partners – links with password protection and audit log.
Encrypted team communication
Closed-chain communication server - Built-in, end-to-end encrypted chat and video conferencing – no reliance on external providers. Messaging and communication data remains on your ViVeSec Box device, without any external server involvement
Access/authorization management
RBAC-based authorization management, 4-eye principle for critical operations, SSO integration (LDAP / SAML / OIDC), detailed audit log.
Compliance & audit
Exportable audit log supporting NIS2, GDPR, ISO 27001 and Cyber Essentials requirements out of the box. Tamper-evident entries with cryptographic signatures.
Business continuity
With a built-in UPS, it also bridges network power outages. Instant Recovery for virtual machines, instantaneous failover – even to a hybrid-cloud disaster recovery destination.
The six functions are a single, closed platform with unified administration and audit logs – not six separate licenses, not six separate vendors.
Three steps to complete protection
ViVeSec Box deployment is simple and fast – there is no need to shut down production systems.
-
01
Connection
The ViVeSec Box device connects to the existing network infrastructure in a dedicated, isolated segment.
-
02
Replication
An incremental, immutable backup is started - data is continuously replicated to the locked device.
-
03
Recovery
In the event of an incident, files and folders can be restored with one click – recovery of protected systems is dependent on the recovery time, but intact data can be accessed immediately.
Commissioning – up to 30 minutes
Implementing ViVeSec Box is not an IT project that takes weeks or months. It can be deployed without a local IT team – each configuration comes with a guided wizard. Typical deployment per endpoint within 30 minutes.
-
00:00
Unpacking
Power supply 230 V, built-in UPS – no separate UPS required.
- Size 250×140×150mm
- Weight < 2 kg
- 230 V / max. 20 W
-
00:05
Network connection
LAN port or WIFI setup – the installation wizard will guide you through.
- 1× Gigabit Ethernet
- Network segmentation
-
00:15
First login
First login. Setting admin password, Assigning license to master user account, generating cryptographic code.
- Main user
- License
- Admin + 4-eye principle
-
00:20
Installing backup agents
Agents can be installed on protected computers, data storage devices, and servers (Windows). First full backup immediately.
- Agentless (VMware / Hyper-V)
- Windows agent
- First save - immediately
Prerequisites
- Administrator access to the data storage devices, computers, and servers to be protected (for one-time agent installation)
- 230 V mains power and a free LAN port or WIFI available
- List of systems to protect (servers, databases, file shares)
Compliance and transparency – In black and white, publicly
ViVeSec Box is built to not only meet compliance and security requirements, but also to prove it in a documented and verifiable way. All key documents are publicly available for download.
- CCCommon Criteria EAL2 evaluation – ViveSec Server 1.1.0
- EUEU-MADE – supply chain
- NIS2Support for NIS2 technical controls
- GDPRGDPR-supporting architecture
CE Declaration of Conformity
Official CE declaration of conformity. Legal basis for placing on the EU market.
Open →Security Target (Common Criteria principles)
Detailed documentation of the resources to be protected, threat models, and security features. EAL2 evaluation: ViveSec Server 1.1.0.
Open →Technical data sheet (Datasheet)
Hardware and software parameters, connectors, network requirements, storage capacities.
Open →User manual (HU/EN)
Installation, operation and recovery instructions in Hungarian and English.
Open →Security without compromise – by minimizing environmental impact
The ViVeSec Box is a compact, low-power appliance with a typical operating consumption of just 8 W. It consumes only a fraction of the energy – and carbon dioxide – of an average server over a full year of operation.
8 W
Operating consumption
ViVeSec Box
8 W
Average rack server
202 W
Low noise case fan, compact size, no separate server room air conditioning. Operates continuously from the power of an LED light bulb.
70 kWh
Annual energy consumption
21 kg
CO₂ emissions / year
175 km
Car equivalent / year
5year
Hardware lifespan
97,5%
Smaller carbon footprint than an average corporate server – with the same level of protection.
Made in EU
Components and assembly within the European Union, with a transparent supply chain.
Passive cooling
No fans, no dust, no moving parts. Quiet, long-lasting operation.
Energy efficient
Maximum peak consumption of 20 W, typically 8 W. A fraction of a traditional server.
Buyback program
Based on a separate agreement, we will buy back and recycle the device at the end of its 5-year life cycle.
Calculation basis: 8 W continuous load × 8,760 operating hours/year ≈ 70 kWh/year. CO₂ equivalent: EU average network emission factor (~0.3 kg CO₂e/kWh, EEA 2023) ≈ 21 kg/year. Car equivalent: new passenger car average 120 g CO₂/km (WLTP) ≈ 175 km/year.
Compliance
NIS2 · GDPR · ISO/IEC 27001
ViVeSec Box supports the implementation of the technical controls required for compliance. Organisational compliance depends on the entire technical, procedural and governance environment.
Compliance details →- NIS2
- GDPR
- ISO/IEC 27001
Supported technical controls
- Immutable backup
- Encryption
- Access management (RBAC, four-eyes principle)
- Exportable audit log
- Recovery
- Business continuity
For businesses of every size
The ViVeSec ecosystem scales from micro to enterprise – with ViVeSec AI Box for every need.
Micro / ROBO
Small businesses and remote offices. Compact size, simple deployment, full protection + Secure AI.
SMB
Mid-sized companies with multi-site support and even geo-redundant replication + scalable Secure AI.
Enterprise
Large enterprises and institutions. With geo-redundant replication, maximum performance, scalable Secure AI and even dedicated support.
Storage capacity depends on the model: 1 TB – 8 TB net, with redundant storage. We put together the exact configuration based on a needs assessment.
Closed ecosystem, made in the EU
- Operating consumption
- 8 W (typical), 20 W (peak)
- Cooling
- Passive CPU cooling with low-noise case fan
- Built-in UPS
- Yes – bridges temporary power outages
- Storage capacity
- Model dependent, 1 TB – 8 TB net - redundant
- Network
- 1× Gigabit Ethernet + WIFI
- Operating system
- Closed, dedicated ViVeSec platform
- Size
- 250 × 140 × 150 mm
- Place of manufacture
- European Union
EU-MADE
CC · ISO/IEC 15408
EAL2 · ViveSec Server 1.1.0
Security Target
One hardware, one license – transparent construction
The ViVeSec Box business model is simple: one-time hardware cost + annual license fee. There are no hidden transaction fees, no data or user-based billing, and no separate “enterprise” module surcharges.
One-time
ViVeSec Box hardware
One-time investment cost of the device – depends on configuration (storage capacity). Made in the EU, with a 3-year manufacturer's warranty, with an optional 5-year extended manufacturer's replacement warranty.
Annual
ViVeSec license
- Firmware updates and feature enhancements
- Security patches with priority release
- L1 remote support (email + phone, EU working hours)
- All six ViVeSec Box modules (backup, file storage, file sharing, authorization and remote access management, communication server, cooperative document management)
- Unlimited users and unlimited data (within hardware capacity)
-
01
Fill out the form
Fill out our online request for quotation form – some basic information (company size, systems to be protected, estimated data volume).
~5 min -
02
Callback & consultation
Our expert will contact you within 1 business day to clarify your technical and business needs.
1 business day -
03
Customized offer
Detailed, written offer with breakdown of ViVeSec Box model + license + optional services – within 2 working days.
2 business days
When technology turns into business results
We do not show generic claims, but operating outcomes that can still be shown after an audit or incident.
They hit at 10:00 PM, and by 7:00 AM everyone was back at work. With traditional backup, we would have been thinking in days, if recovery had even worked.
Anonymized customer quote about the 47-minute recovery.
Anonymous reference cases
Rapid recovery after a ransomware attack
Challenge
In December 2024, a coordinated ransomware attack hit the entire internal file server and warehouse management system. Based on traditional daily backups, recovery would have taken a minimum of 3-4 days – in the middle of the Christmas season.
ViVeSec solution
By launching Instant Recovery from the ViVeSec Box immutable backup, the entire file server and warehouse management system were restored to the controlled state before the attack in 47 minutes. There was not a single day of operational downtime.
47 min actual RTO after ransomware attack
“With a traditional backup, we would have thought for days, if it would have been possible at all. The ViVeSec Box was attacked at 10:00 PM, and everyone was working by 7:00 AM.”
Locally stored patient data backup
Challenge
Sensitive patient data is continuously generated across multiple locations. The existing backup was cloud-based, legally risky due to cross-border data transfer. NIS2 compliance also became urgent.
ViVeSec solution
Each of the three locations has a ViVeSec Box, with encrypted replication between them. Data never leaves the customer infrastructure. RBAC + 4-eye principle for all data access, with exportable audit log.
100% On-premise storage · exportable audit log
“During the supervisory audit, the Security Target documentation and the export audit log were of great help during the audit.”
Business continuity under regulatory pressure
Challenge
The financial sector’s stringent BCP/DR requirements were not adequately supported by the existing backup system. The RTO requirement for the full annual regulatory audit was under 1 hour – the old system performed between 4-6 hours.
ViVeSec solution
Two geo-redundant ViVeSec Boxes – one at a primary and one at a disaster recovery site. Continuous replication, automated failover. Consistently performs in 15 minutes on new RTO tests.
< 15 min audited RTO, with geo-redundant configuration
“During the regulatory audit, the auditor requested an RTO test performed with ViVeSec Box as official evidence.”
The cases are anonymized.
All documentation in one place
Datasheet, Security Target and installation manual – publicly available for download.
What you should know about ViVeSec Box
What makes ViVeSec Box different from a traditional backup?
ViVeSec Box is a closed, immutable appliance: backups are physically and logically isolated, ransomware cannot access or modify them. This is not guaranteed with classic backups.
How long does it take for business to recover after an attack?
Intact data stored on the ViVeSec Box is immediately available – there is no multi-day recovery phase. Full recovery of protected systems is a function of the recovery time, which is orders of magnitude shorter than restoring traditional backups from tape or the cloud.
What environments is it compatible with?
Windows servers and workstations, file servers, network file shares (SMB/NFS), and S3-compatible storage integrations. A detailed list will be provided during the request for quotation.
Where is the data stored?
On your own infrastructure. ViVeSec Box does not send data to third parties; all data and access are controlled solely by you.
What does the CRYSTALS-Dilithium signature and quantum resistance mean?
ViVeSec Box uses NIST-approved CRYSTALS-Dilithium post-quantum signatures to verify the integrity of saved data, combined with AES-256 symmetric encryption. This means you gain reliable long-term data integrity against current and future quantum computer attacks.
Does ViVeSec Box meet the requirements of NIS2 and DORA?
Yes. ViVeSec Box meets the immutable backup, audit log, access control and incident management capabilities required by NIS2 at the same time as deployment. For DORA-regulated financial institutions, recovery time (RTO) of less than 60 seconds and measurable business continuity are of particular value.
How is ViVeSec Box different from cloud-based backups?
Cloud-based services store backup data on the provider's infrastructure - making it vulnerable to compromise or inaccessible in the event of a service outage, and data stored with third parties is generally not acceptable in most regulatory systems. ViVeSec Box operates in your own infrastructure, with isolated, immutable storage, without external dependencies.
Do you need a dedicated IT team to operate ViVeSec Box?
No. The ViVeSec Box is a closed, hardened appliance that operates autonomously after deployment: firmware updates and security patches are managed by ViVeTech, and daily operation is limited to checking audit logs and alerts. Detailed admin tasks are included in the user manual.
How can I order it?
Fill out the request for quote form and we will contact you within 1 business day to map your environment and select the right configuration.
ViVeSec AI Box – the thinking partner
ViVeSec Box keeps your data safe. ViVeSec AI Box learns from it – offline, privately. Discover the other half of the ecosystem.
ViVeSec AI Box in detail →