Enterprise & Government
For places where nothing leaves the building
Prompt Firewall can run entirely inside your own network, with no connection to the outside world. Your data never leaves your premises. Same scanning and containment as our cloud service, fully under your control, ready for the strictest environments from day one.
Three ways to run it
Same scanning and containment, wherever it fits best
Run it on your own servers, on small disconnected devices, or let us manage it for you. You choose what suits your environment. Both layers of protection are identical across all three.
On your own servers
Install it behind your firewall and run it like any other internal service. Updates arrive without downtime. All logs stay on your systems. Ideal for production workloads on your own infrastructure.
On air-gapped devices
A lightweight version that runs with no network at all. Full scanning and containment. Perfect for disconnected sites, field operations, small devices, and any place where reaching out to the internet is not an option.
We run it for you
No setup, no maintenance, no infrastructure to worry about. We handle it all and keep your protection up to date automatically. A good starting point if you want to move to self-hosted later.
Same protection, everywhere
Start in the cloud when speed matters. Move to your own servers when you want more control. Take it to disconnected sites when you must. You stay protected to the same standard in all three.
Fully isolated
Nothing goes out.
Nothing comes in.
When you run it inside your network, Prompt Firewall never calls home. No phone-home checks, no telemetry, no outside connections. Your content and your logs stay exactly where you want them.
When we send you updates to our protection rules, they arrive encrypted with strong encryption through preapproved methods. You bring them in on approved media, load them in, and you’re up to date. Everything else stays inside your walls.
Security you can count on
Protection, all the way through
Everything about how we run is built to reassure a security team. Tamper-proof updates, a clear record of every decision, and no hidden dependencies.
Tamper-proof updates
Strongly encrypted rule packs
Our protection rules arrive sealed. No one else can read or change them along the way. Every update is clearly labelled so you always know which version is in use.
Updates with zero downtime
Never offline
New protection rules slot in without stopping your service. If an update ever looks wrong, the previous version stays in place automatically. You’re never left unprotected.
Full audit trail
Every request, recorded
Every scan and containment is logged with what came in, what was found, and how it was protected. Clear evidence for auditors, customers, and your own security team, without slowing anything down.
Nothing unexpected
What you install is what runs
No surprises, no silent updates, no mystery downloads. Everything is pinned to versions you approve. Once installed, nothing changes without your say-so.
Traceable decisions
You can always explain why
Every response tells you which version of our rules made the decision. If an auditor, regulator, or customer asks questions months later, you can recreate the exact conditions and prove why.
Only what you need
Turn features on as you go
You don’t have to run everything. Start with the core protection, then enable extras like image reading or deeper language analysis when and if you need them.
Modest by design
Runs on hardware you already have
Whether you have a small device in the field or a busy data centre, Prompt Firewall fits. It adapts to the hardware it runs on, making the most of what’s available without asking for more.
Small
Field and embedded devices
2 CPU cores, 2 GB RAM. No graphics card.
For disconnected sites, field operations, and embedded kit. Same protection, in a smaller footprint.
Standard
Normal production use
3 to 8 CPU cores, 8 to 16 GB RAM. No graphics card.
For typical company deployments, internal tools, and team-scale AI applications.
High volume
Enterprise-scale traffic
16+ CPU cores, or several servers together. 1,000+ requests per second. Still no graphics card.
For very busy applications, large customer-facing platforms, and enterprise-wide deployments. Scales smoothly as you grow.
Compliance & regulated industries
Built for environments where compliance is not optional
Support
A team behind your team
Enterprise customers get a dedicated account manager, direct access to our security research team, and priority engineering support. Keeping you protected is on us.
- Dedicated account manager
- 24/7 priority support
- Quarterly security reviews
- Custom threat model development
Talk to a team that’s built for your environment
Procurement paths for regulated industries. Fully disconnected deployments. Rollouts that fit your classification rules. Tell us what you’re protecting and we’ll design the fit.