Air-gapped

An air-gapped system has no physical connection, and no automated logical connection, to untrusted networks; data moves in or out only by manual transfer, such as approved removable media. Systems that exchange data through one-way gateways (data diodes) or cross-domain solutions are connected through controlled interfaces, which NIST terminology treats separately from an air gap. Software for air-gapped systems cannot rely on cloud API calls, package registry pulls, or external telemetry. Deva's scanner and compliance mapping run locally, and a local model can be installed for offline use.