Where it runs
- AI data centers: GPU servers and stores holding model weights
- Cloud providers: keeping one customer’s breach from reaching another
- Banks and governments: servers holding payments, records, and national data
A network card inside each server that cuts a hacked machine off from the rest of the network on its first suspicious move.

It inspects all traffic in and out of one server on its own chip. Nothing is installed on the server, so an attacker who takes it over cannot switch the card off.
Cloud and server tools react in seconds to minutes, and attackers switch off agents on machines they control. Hardware in the network path keeps working when a server is taken over.
Average time from first break-in to spreading inside a network
CrowdStrike 2026The fastest recorded spread from first break-in
CrowdStrike 2026How long the record 31.4 Tbps flood lasted
StationXEvery Inline unit is designed so that action at machine speed can never take a network down or exceed the authority it was given.
A hardware bypass keeps traffic flowing if a unit crashes or loses power.
Each block or rate limit lapses unless Ollandi confirms it.
A unit acts on its own only to drop, rate-limit, or isolate. Bigger actions go to Ollandi and your people.
A named operator’s hardware key is needed to raise a unit’s authority level.
Each action is signed inside the unit and logged with a short packet capture.
Every deployment starts by watching and recording only, then goes live one level at a time.
A card inside each server, a box at each site, and a carrier-grade unit where your network meets the internet, all run by Ollandi.
Every deployment starts in shadow mode, watching and recording only, then goes live one level at a time.