Logs and configs off OT and test-bench PCs, without USB

Test benches, HMIs and engineering stations sit in isolated zones, and USB keys are blocked because they carry malware into them. Bouraq gets your logs out through the screen, into a named account, with a fingerprint and a time stamp.

See the price and start Watch the proof

€79 / monthbilled yearly (€948), or €99 monthly; 14-day money-back guarantee
≈ 5 kB/s5 MB of logs ≈ 2 min 23 s per loop on a full-HD screen (estimate yours)
Nothing to installone HTML file on the offline PC, and a camera you are allowed to use

Why USB is the problem on the shop floor

Removable media and transient engineering laptops are among the most common ways malware reaches industrial networks, which is why plants block USB ports and IEC 62443 asks for every flow between zones to go through a defined conduit. The engineer still has to get a 5 MB log to the person who can read it.

How it works on a test bench

Copy Bouraq Prism, one HTML file, to the bench PC once, through your approved process. Its SHA-256 fingerprint is in your space and in the audit trail, so the OT security officer can check the copy.
Open it in the browser, choose the log folder: Prism compresses and encrypts it, then shows QR pages, six codes every 2.5 seconds.
Point your phone, or an allowed webcam, at the screen. Missed codes come back on the next loop; the file is rebuilt and checked by sha256 in your space.
Download it from your office PC. Nothing was plugged into the bench, and nothing listens on it: the screen only emits.

How long it takes

Prism shows about 5 kB/s of compressed data on a full-HD screen. Logs compress well: 5 MB of logs take about 2 min 23 s per loop, 1 MB of already-compressed data about 3 min 10 s. Bouraq is for the files you move every day, not for historian dumps or firmware images of hundreds of megabytes. Estimate your files.

What the OT security officer gets

A one-way optical conduit out of the zone that can be documented: no network connection, no driver, no executable on the bench PC.
A tamper-evident audit trail: account, file name, size, sha256 and time of every delivery, failure and download, exportable to a SIEM.
On an organisation instance: export can be authorised alone (the way back switched off in every Prism copy), and each transfer can wait for a second person's approval.
Hosting in the EU and a security page that states what our server sees.

Where it fits

A good fit

Test-bench, HMI and engineering-station logs, trends and configs
Plants where USB is blocked and phones are allowed
Integrators and commissioning engineers at customer sites that allow it
Security officers who want a logged conduit instead of USB exceptions

Not a fit

Cleanrooms and sites that ban phones and cameras
Continuous machine-to-machine data: that is a data diode's job
Hundreds of megabytes per transfer
Any site rule or contract that does not allow it

Honest scope. Bouraq needs a camera allowed in front of the screen and suits kilobytes to a few megabytes per transfer. It is not a certified one-way gateway and does not replace a data diode where one is required. Security and architecture →

Questions

How do I get files off an air-gapped SCADA or OT network without weakening it?

Use a channel your OT security officer has documented. With Bouraq nothing connects to the zone: the engineering station's screen shows encrypted QR codes and a camera outside reads them, and every transfer is recorded with its sha256. Large or continuous flows still belong to a data diode.

Does Bouraq connect to the OT network?

No. Prism runs in the browser of the bench PC from a file on disk and needs no network. Only the phone or the webcam that reads the codes is online, outside the zone.

Can we allow export and forbid anything coming back?

Yes, on an organisation instance: with the way back switched off, every issued Prism copy offers Send out only. Write to us about a dedicated instance.

Replace the next USB exception with a conduit that leaves a record.

See the price and start Security page for approvers

14-day money-back guarantee · €79 a month billed yearly, or €99 monthly.