Appliance for NIS2 Compliance

XRENN™ EdgeGuardian NIS2
Revolutionary Edge AI Network Guardian

Security without compromise. XRENN™ EdgeGuardian NIS2 brings cutting-edge AI analysis directly to your network edge – 100% offline, zero data exfiltration, and local policy enforcement. Unique AI Defense 1.0 protection for your audit readiness and NIS2 compliance.

NEW AI Gateway: local gateway for your team to safely use ChatGPT, Claude, and enterprise AI tools. Learn more
100% OFFLINE (ZERO CLOUD) AI Autonomy (LLM + RAG) ISO/IEC 27001:2023
Buy XRENN™ EdgeGuardian
< 1 min
EdgeGuardian Boot Time
+ 84%
NIS2 Compliance Score
100%
Local Processing
XRENN EdgeGuardian NIS2 Device
New · AI Defense 1.0

AI Gateway: Gateway for AI in your organization, zero cloud

Your team is already using ChatGPT, Claude, and Cursor. Route them through EdgeGuardian. Every prompt is inspected before leaving your premises, every incident is attributed to a specific employee, and the entire engine runs on your local appliance – not in a third-party cloud.

14
AI providers supported in a single gateway
0
third-party clouds for security inspection
1 : 1
incident = specific employee and tool
Global
detection including National IDs, VAT & IBAN

Identity, not just an IP address

Each employee holds an individual gateway token (stored as a bcrypt hash). Incidents pinpoint the exact identity and tool, never just an anonymous IP.

Pre-flight inspection

Shields against prompt injection, jailbreaks (DAN, AIM, STAN…), system prompt leakage, and exposure of National IDs, VAT numbers, IBANs, and API keys.

14 providers, zero integration overhead

An OpenAI-compatible route covers 13 major providers, while Anthropic features a native route. Tools integrate instantaneously without refactoring.

Keys isolated from users

Encrypted provider credentials reside in the appliance hardware vault. Staff never handle production keys. Revoke tokens instantaneously and atomically upon offboarding.

Gateway bypass detection

Direct calls to external AI endpoints trigger an ai_gateway_bypass incident. The unit passively monitors TLS metadata (SNI) without payload decryption.

Direct to NIS2 reports and SIEM

Incidents from AI Gateway flow directly into PDF audit reports and an accessible REST API for SIEM/SOAR for NIS2 and GDPR auditors.

# Route OpenAI via Gateway (port 8100)
POST /openai/v1/chat/completions
Host: edgeguardian:8100
Authorization: Bearer token_developer
User-Agent: Cursor-IDE (workstation-dev01)

{
  "model": "gpt-4o",
  "prompt": "Analyze source code and sanitize credentials..."
}

# Shadow AI: proprietary source leakage intercepted
# Local pre-flight: secrets, PII, and keys masked

How It Works in Practice

  • Inspection happens on-premise

    Both the gateway and AI Defense execute locally on the hardware; prompts never pass through external security clouds. Following inspection, the request safely proceeds to the selected AI provider.

  • Fail-open: uninterrupted workflow

    In the unlikely event of detection engine downtime, the gateway never stalls legitimate development or business workflows.

  • Passive bypass detection enforces policy

    Gateway usage is an organizational policy reinforced by passive SPAN/mirror port bypass detection.

Deploy EdgeGuardian with AI Gateway More About AI Defense
Effortless Implementation

How It Works in Practice

Three straightforward steps to complete NIS2 compliance. XRENN™ EdgeGuardian guides you through initial setup, administrator account creation, and 2FA configuration automatically.

01

Instant Connection (SPAN/Mirror)

EdgeGuardian connects seamlessly to a mirror port on your core switch. This passive approach guarantees zero operational risk to network stability and zero latency for production traffic.

02

Local AI Analysis

Within minutes, your "Network Story" comes to life. The system explains in plain language why an endpoint was flagged or why an IoT camera initiated anomalous external traffic, citing relevant NIS2 requirements directly.

03

Cryptographic Audit Reports

Export comprehensive PDF reports tailored for executives and technical auditors alike. Every report is cryptographically authenticated with an HMAC-SHA256 signature, ready for regulatory inspections.

Comprehensive Protection

Key Features for NIS2 Compliance

Everything required for end-to-end NIS2 compliance in a unified solution: from real-time telemetry and network topology to policy enforcement and audit reporting.

Absolute Privacy

Edge LLM computation with zero outbound telemetry. Network traffic never leaves your premises. A 100% on-premise engine housing AI models, APIs, and network intelligence locally.

AI Defense 1.0

Pioneering detection of confidential corporate data exfiltration to public AI engines. Real-time recognition of weaponized tools like WormGPT, FraudGPT, and prompt injection attacks.

AI Gateway

Local gateway for employee AI toolchains: pre-flight prompt inspection, per-user identity instead of shared secrets, and bypass detection. How it works →

NEW

Executive Peace of Mind

Automated generation of audit reports mapped directly to NIS2 requirements. Keep concrete evidence ready for auditors before they ask. Preparedness replaces uncertainty.

LEGAL CERTAINTY

Asset Inventory & Fingerprinting

Automated discovery of all connected devices with deep OS fingerprinting, CVE mapping, and localized risk scoring.

Real-Time Threat Monitoring

Continuous detection of traffic anomalies, DNS exfiltration, brute-force attacks, and lateral network movements in real time.

Honeypot Decoy Network

Deploy optional deception containers (RTSP, Telnet, Modbus) across segments to detect reconnaissance and lateral intrusion attempts early.

Network Topology & VLANs

Automated interactive map depicting network topology and active switches in real time. Gain full visibility into data paths and VLANs without agent installation.

Cryptographic Audit Logs

Tamper-proof event recording secured with HMAC-SHA256 (WORM) integrity seals. Satisfies strict non-repudiation mandates for NIS2 and ISO/IEC 27001.

Appliance Ready for NIS2

Auditable documentation of technical and organizational security measures under NIS2 (Directive EU 2022/2555). 100% on-premise execution (zero cloud) with GDPR compliance and DPA included. High-performance AI model preventing proprietary data leakage to public AI services.

  • Fully offline operation (edge LLM + RAG AI)
  • GDPR compliant, DPA standard in agreements
  • Auditable reporting (EU NIS2 & national directives)
  • Incident reporting: Supervisory-ready drafts
EdgeGuardian Device
Buy on e-Shop
ISO 27001 Certified Badge Corporate Certification

XRENN Labs s.r.o. holds a certified Information Security Management System under ISO/IEC 27001:2023

The certificate was awarded by accredited certification body TDS Brno following a rigorous certification audit. The appliance safeguarding your network is developed and maintained by an organization whose own security practices have been verified by an independent accredited authority.

Standard
ISO/IEC 27001:2023
Information Security Management System (ISMS)
Certificate No.
TDS 72/2026
Certification audit report no. 361/2026
Validity
Until 27 August 2029
Issued in Brno on 28 August 2026
Certification Body
TDS Brno no. 3105
Accredited by CAI, Member of IAF MLA

Certificate Details

Organization
XRENN Labs s.r.o.
Reg. No. 219 33 766
Česká 277/26c, 742 21 Kopřivnice, Czech Republic
Statement of Applicability
ver. 1.0.1
dated 1 July 2026
Certification Body
TDS Brno, Quality Management and Certification Section, p. s., Certification Body for Management Systems no. 3105, accredited by the Czech Accreditation Institute (CAI) pursuant to EN ISO/IEC 17021-1:2016
Scope
Design, development, testing, operation, deployment, and support of software, cloud, and HW/SW solutions utilizing artificial intelligence for energy and cybersecurity, including data analysis, predictive services, security audits, consulting, implementation, monitoring, and technical support.

Official Documentation

Certificate ISO/IEC 27001:2023 no. TDS 72/2026, page 1 Certificate, Page 1 Annex to Certificate TDS 72/2026, list of certified premises Annex, Certified Sites
Certificate (PDF, English) Certifikát (PDF, česky)

Trusted Supply Chain Partner

NIS2 mandates thorough supply chain security vetting. Our certified ISMS simplifies vendor risk assessment and procurement compliance.

Controlled Risk & Engineering

Certification encompasses end-to-end design, development, testing, deployment, and ongoing support for cybersecurity solutions.

Independently Audited

Audited by an accredited body under the multilateral IAF MLA framework. Review and download the complete certificate documentation directly.

Guaranteed Continuity

Support & SLA Guarantees

Your cybersecurity continuity is our utmost priority. We are not merely a hardware supplier – we are your trusted technology partner in sustaining a resilient cybersecurity posture.

BASIC

Signatures & Patches

Monthly updates for Suricata IDS/IPS signatures and routine OS security patching to eliminate emerging Common Vulnerabilities and Exposures (CVEs).

  • IDS/IPS Signatures
  • Kernel Hardening
BASIC

Legislative Compliance

Continuous alignment of reporting templates and regulatory mapping according to evolving NIS2 guidelines for friction-free compliance audits.

  • Regulatory Tracking
  • Audit-Ready Reports
BASIC

Documentation & API

Comprehensive technical guides for the API architecture alongside integration manuals for third-party SIEM/SOAR platforms.

  • OpenAPI Documentation
  • SIEM/SOAR Connectors
PRO

AI Model Evolution

Upgrades to the on-premise Large Language Model (LLM) and ongoing optimization of the RAG knowledge base for refined NIS2 anomaly detection.

  • LLM Fine-Tuning
  • Knowledge Base Refinements
PRO

Hardware NBD Swap

In the event of a hardware malfunction, we guarantee immediate dispatch of a replacement unit via Next Business Day (NBD) expedited delivery.

  • Replacement Guarantee
  • Zero Lock-in
PRO

Expert SOC Assistance

Direct advisory sessions with our L3 cybersecurity engineers for critical incident triage, analysis, and audit response preparation.

  • Incident Response
  • Audit Defense Advisory

Require a Custom Enterprise SLA?

For critical infrastructure and enterprise networks, we provide customized 24/7/365 support with a guaranteed 4-hour response time and 24-hour resolution SLA.

Order Support Consult SLA
Technology Evolution

Roadmap EdgeGuardian

Enter the market with an enduring advantage. Safeguard your infrastructure with EdgeGuardian over the long term. Your security begins here.

2027 Q3

XRENN™ Regional Hub

Geographic expansion into SK, PL, and DE markets. Comprehensive localization for national cyber regulations such as IT-SiG 2.0 and regional NIS2 compliance supported by dedicated local SLAs.

In Preparation
2027 Q4

AI Defense 2.0

Autonomous behavioral LLM architecture (Zero-Day threat detection), heuristic Deep Packet Inspection (DPI), and automated policy synthesis with formal verification (Z3 solver).

Research & Development
2028

Bridge / Gateway Inline Mode

Full inline firewall displacement (Bridge/Gateway) equipped with 2.5GbE/10GbE network interfaces and centralized Zero-Trust Fleet Management spanning multi-site deployments.

Planned
Open Architecture

API & SOC Integration

Engineered with an open architecture for modern SOC teams. All EdgeGuardian capabilities and telemetry endpoints are accessible via 2FA-secured REST APIs.

FastAPI & OpenAPI 3.0.1

XRENN™ EdgeGuardian is not an isolated appliance. Its core is powered by high-performance FastAPI, facilitating sub-millisecond query responses and seamless integration. Built on OpenAPI 3.0.1 standards, it connects directly into existing enterprise SIEM/SOAR pipelines (Swagger/ReDoc).

  • Full REST API support (Swagger/ReDoc)
  • Real-time webhooks for security events (54 endpoints)
  • Cryptographic audit log exports in CSV/JSON
  • Strict 2FA authentication across all user roles
Buy EdgeGuardian NIS2
Transparent Investment

Fair Pricing with Zero Hidden Fees

Predictable, transparent pricing. Guaranteed introductory price of €1,214 excl. VAT until 31 Dec 2026. From 01 Jan 2027, standard retail pricing of €2,055 excl. VAT applies.

Price guarantee €1,214 until 31 Dec 2026
Starter Edition 2026

XRENN™ EdgeGuardian NIS2

1,214 € excl. VAT
From 01 Jan 2027 price €2,055 excl. VAT Save €841
In Stock · ★★★★★ 4.9 / 5
Introductory Price Guarantee until 31 Dec 2026

The introductory price of €1,214 excl. VAT is firmly locked until 31 December 2026. From 01 January 2027, the standard pricing of €2,055 excl. VAT takes effect. Purchasing today saves you €841, providing full offline hardware and proprietary firmware with a perpetual license and zero recurring fees.

The comprehensive hardware appliance for full NIS2 compliance starts right here!

  • Master CPU
    Raspberry Pi 5 (8 GB RAM). 4 cores Cortex-A76 @ 2.4 GHz.
  • AI Acceleration
    Custom TPU + eBPF Kernel Engine. Offline LLM + hybrid RAG with zero cloud dependency.
  • High-Speed Storage
    512 GB MicroSD Samsung EVO Plus.
  • Thermal Management
    Active cooling + passive aluminum heatsink block.
  • Box Contains
    EdgeGuardian NIS2, power adapter, Ethernet cable, digital documentation.
  • ECO Operation
    Ultra-low power draw: 5 to 8 W/h. Built for resilient 24/7/365 network operation.
  • One-Time Upgrade Pack
    Get UPDATE PACKAGE →
Secure Price €1,214 →
Questions & Answers

Frequently Asked Questions

Everything you need to know about EdgeGuardian NIS2 and network deployment.

No. The device functions in 100% Offline Autonomy mode. All sensitive telemetry is processed locally on your hardware and never leaves your premises. Internet connectivity is strictly optional (opt-in) for remote management (XSC) and instant AI model updates if you choose to enable it.

XSC is an optional secure layer for remote maintenance, signature updates, and RAG knowledge base evolution. Access is granted exclusively through an encrypted SSH tunnel owned by the vendor. You retain absolute control and can enforce Strictly OFFLINE mode at any time.

XRENN's core philosophy is Low TCO. You purchase the hardware and own the software perpetually. Core monitoring and NIS2 compliance capabilities carry zero recurring monthly fees. Optional subscriptions apply only to periodic update packages and expert assistance across BASIC and PRO SLA tiers.

Yes. The appliance is engineered for comprehensive alignment with NIS2 (EU Directive 2022/2555) and associated national cybersecurity laws. It automatically produces audit reports complete with technical summaries and citations of relevant regulatory articles, providing incontrovertible evidence for compliance auditors.

All exported audit reports are cryptographically sealed with an HMAC-SHA256 signature. This guarantees that records have not been altered or tampered with since the moment of generation on the device – fulfilling non-repudiation requirements.

Privacy-by-design is embedded at the architectural foundation. EdgeGuardian automatically masks PII (personally identifiable information such as emails, phone numbers, and credentials) in all outputs and dashboards. With Zero-Cloud execution, no personal records ever transit to third parties.

Deployment is designed to be frictionless. In SPAN/Mirror mode (passive monitoring), the device connects to a mirror port on your network switch. This method has zero impact on throughput, bandwidth, or latency. The system commences asset mapping immediately upon initialization.

2026 is the pivotal enforcement threshold for NIS2 compliance audits across the European Union. Early adoption under the Starter Edition guarantees not only the introductory price discount, but more importantly the runway to compile audit history, fine-tune internal policies, and achieve peace of mind before formal regulatory oversight begins.

Yes. XRENN Labs s.r.o. holds Certificate no. TDS 72/2026 for its Information Security Management System pursuant to ČSN EN ISO/IEC 27001:2023, valid through 27 August 2029. Awarded by TDS Brno (Certification Body no. 3105, accredited by CAI). The certification covers the company's ISMS, verifying organizational security. Download full certificate →

AI Gateway is a dedicated local proxy integrated into the EdgeGuardian appliance. Employees interact with AI services (OpenAI, Anthropic, Mistral, Groq, and others) through this gateway rather than establishing unmanaged external connections. Prior to outbound transit, the gateway intercepts prompts to check for prompt injection, jailbreaks, and leaks of corporate or personal data, attributing incidents to specific users. It delivers oversight and an immutable audit trail for NIS2 and GDPR.

Both the gateway routing layer and the AI Defense security engine run locally on your hardware appliance. Prompt analysis never transits third-party security vendors or XRENN infrastructure. Once inspected and approved, prompts are routed to the specific AI provider designated by the user, identical to standard operation.

Utilizing the gateway is an established corporate policy. To enforce this, EdgeGuardian passively observes TLS metadata (SNI) on the SPAN/mirror switch port and flags any direct outbound connections to known AI provider endpoints from non-gateway IPs as an ai_gateway_bypass incident. The unit inspects transport metadata only – never prompt contents.

Ready for NIS2 Compliance?

Complete audit report ready within 48 hours. Zero commitments. Transparent pricing. 100% OFFLINE.

Go to e-Shop
< 30 s
Average incident explanation time
> 90 %
Device fingerprinting accuracy
< 5 %
LLM hallucination rate in RAG
< 48 h
Audit report delivery on your desk