Byos Secure Edge™ is a hardware-based network microsegmentation platform designed to isolate endpoints and prevent lateral movement and ransomware. It functions as a CSfC (Commercial Solutions for Classified) compliant retransmission device, meeting NSA requirements for MA CP 2.6 sections 11.8 (Retransmission) and 11.9 (Hardware Isolation). The platform consists of multiple hardware form factors: - Embedded Edge™: An M.2 secure networking card installed in a laptop's WWAN slot - Endpoint Edge™: A small, external USB-C device for laptops and tablets - Gateway Edge™: An IoT gateway for stationary assets such as workstations, PLCs, and servers Each asset is placed in an isolated microsegment, making it invisible on the local network and preventing discovery, fingerprinting, and unauthorized access. The solution operates independently of the host operating system, providing protection against OS-level bypass and stealth attacks. A centralized control plane is provided through two components: - Management Console™: An admin interface for fleet-wide visibility and granular traffic control via precision firewalls - Secure Lobby™: A secure SDN overlay that encrypts all communication and enforces Zero Trust least-privilege access The platform is agentless, requires no software installation, and is plug-and-play. It defends against lateral movement, ransomware, spoofing, DoS, and man-in-the-middle attacks. Hardware is manufactured in the USA with a certified supply chain and is FIPS 140-2 validated.