Full Report
Two decades ago, we founded Waterfall with one purpose: to defeat nation-state attacks impacting OT environments and critical infrastructure. The post Big OT Security, Smaller Footprint – Meet DiodeCore! appeared first on Waterfall Security Solutions.
Analysis Summary
# Industry News: Waterfall Security Launches DiodeCore to Address AI-Driven OT Threats
## Summary
Waterfall Security Solutions has announced the launch of **DiodeCore**, a compact, hardware-enforced unidirectional gateway designed for smaller, distributed Operational Technology (OT) sites. The product aims to democratize high-end nation-state grade protection for environments that previously found traditional gateways too bulky or complex to deploy at scale.
## Key Details
- **Date:** June 24, 2026
- **Companies Involved:** Waterfall Security Solutions
- **Category:** Product Launch
## The Story
Waterfall Security, a long-time leader in unidirectional gateway technology, is expanding its WF-600 family with the introduction of **DiodeCore**. The impetus for this launch is the rapid evolution of AI-driven cyber threats. Waterfall CEO Lior Frenkel highlights that AI is "democratizing" nation-state capabilities, allowing attackers to discover zero-day vulnerabilities (as seen in recent Firefox audits) and automate autonomous attacks on industrial networks.
DiodeCore addresses this by providing a physical "air gap" alternative that allows data to flow out of an OT network for monitoring while making it physically impossible for threats to enter. The device is a half-depth 1U rack-mount appliance containing a literal fiber optic break: a transmit board with no receiver and a receive board with no transmitter. Unlike previous iterations, DiodeCore uses a closed virtual machine (VM) image that can run on existing customer infrastructure (Windows, Linux, ESXi), eliminating the need for dedicated, directly connected servers and simplifying installation in modern, virtualized OT environments.
## Business Impact
### For the Companies Involved
- **Waterfall Security Solutions:** Expands its Total Addressable Market (TAM) by moving into "mid-tier" or distributed industrial environments that were previously priced out or technically deterred by larger gateway deployments.
### For Competitors
- **Competitive Landscape:** Puts pressure on software-based firewall vendors and other hardware-enforced security providers by offering a "lightweight" version of high-assurance security. The move toward virtualization compatibility reduces the friction typically associated with proprietary hardware security.
### For Customers
- **Impact on End Users:** Provides a scalable way to protect small substations, remote pumping stations, or distributed manufacturing cells with the same level of security used in nuclear power plants, but with a smaller physical and operational footprint.
### For the Market
- **Broader Market Implications:** Signals a shift in the OT market toward "hardware-enforced" security as a baseline, driven by the realization that software-only solutions may no longer be sufficient against AI-accelerated exploit development.
## Technical Implications
- **Hardware-Software Hybrid:** The use of a physical fiber break (hardware) combined with a virtualized software delivery model (VM images) represents a strategic shift toward easier integration into modern software-defined data centers.
- **Physical Unidirectionality:** The absence of a laser on the receiving side and a photocell on the sending side creates a physical impossibility for two-way communication, neutralizing remote command-and-control (C2) attacks.
## Strategic Analysis
- **Market Positioning:** Waterfall is positioning itself as the "strong hardware" alternative to the "weak software" status quo. DiodeCore moves them from "niche/high-end" toward "enterprise-wide" deployment.
- **Competitive Advantage:** The half-depth 1U form factor and VM-based delivery lower the barrier to entry, making it easier for CISO/CTOs to approve large-scale rollouts across hundreds of sites.
- **Challenges:** The primary challenge will be convincing customers that a unidirectional flow (which restricts remote control capabilities) is worth the operational trade-off in environments that may still rely on remote access.
## Industry Reactions
- **Expert Commentary:** The industry recognizes a growing trend where AI-driven vulnerability discovery (like the 250+ zero-days found in Firefox) makes traditional patching cycles obsolete. Experts view hardware-enforced isolation as a necessary "fail-safe."
- **Market Response:** Initial customer feedback cited in the announcement suggests high demand for "easier to purchase and deploy" versions of high-assurance gateways.
## Future Outlook
- **Autonomous Attacks:** Within 12–24 months, the market expects fully autonomous OT attacks. Solutions like DiodeCore will likely become the standard for "critical" segments within larger industrial networks.
- **What to watch for:** Watch for whether Waterfall introduces further "as-a-service" models or deeper integrations with cloud-based OT monitoring platforms via these gateways.
## For Security Professionals
Practitioners should evaluate DiodeCore for "North-South" traffic protection in distributed environments where traditional firewalls are deemed insufficient against sophisticated adversaries. The move to VM-based software delivery means less rack space and easier lifecycle management compared to older gateway models, making it a viable candidate for modernization projects.