Loxada Secure
Control the network your team connects through.
Most security tools protect endpoints, identity, and traffic. None of them control the network infrastructure staff connect through outside the office. Loxada Secure does.
Staff working from home networks, serviced offices, coworking spaces, hotels, client sites, and anywhere else outside your direct IT control are connecting through infrastructure your organization cannot see, verify, or manage. This is the uncontrolled network edge.
Loxada Secure addresses it directly. We ship fully pre-configured managed routers that run Loxada’s proprietary firmware; not the manufacturer’s. Every device creates a trusted, encrypted network environment close to the user, centrally managed by your IT team, regardless of what local infrastructure surrounds it.
The problem
The security gap that existing tools don’t reach
The router your staff member connects through at home, in a coworking space, or at a client site is almost certainly running manufacturer firmware your organization has no control over. It may be unpatched. It may contain known vulnerabilities. You have no visibility into its configuration, no ability to verify its integrity, and no way to know whether it has been compromised.
VPN clients encrypt traffic in transit. Endpoint security protects the device. Identity systems protect authentication. None of them secure the network environment itself. That’s the structural gap.
NSA, CISA, GCHQ, and Five Eyes partner agencies have explicitly identified unmanaged edge devices as a high-priority attack target, noting that compromised routers enable credential theft, traffic interception, and persistent network access that survives endpoint security measures.
How it works
A trusted network environment, wherever work happens
Loxada Secure works in three steps.
- We ship fully pre-configured, tested routers running Loxada’s proprietary firmware to your users. No software to install. No complicated setup.
- Each device creates a secure, encrypted connection to the Loxada Remote Private Network, logically isolated from the surrounding local infrastructure. The user connects to a consistent, trusted network environment from the moment they plug in.
- Your IT team manages the entire device estate centrally through the Loxada administration portal. Monitor status, manage assignments, push revocations, and receive monthly assurance reports, without needing direct access to individual routers.
Key properties
What Loxada Secure delivers
- Complete firmware control. Proprietary firmware replaces manufacturer firmware on every device shipped. No vendor code remains. Read-only, tamper-resistant, persists after factory reset.
- Always-on encrypted connectivity. All traffic routes through an always-on encrypted tunnel to the Loxada RPN. No split tunneling. No exceptions.
- Security by default. DNS-level blocking of known malicious domains. Secure boot. Firmware validation. Encrypted management channel.
- Automated updates. Firmware updates and security patches are managed centrally by Loxada and applied automatically. No user action required. No dependency on manufacturer update practices.
- Hardware-agnostic architecture. Supports over 200 hardware models across multiple manufacturers. No single-vendor dependency.
- Network isolation. Each device is logically isolated from the surrounding local network. Unknown devices on shared Wi-Fi cannot interact with a Loxada-connected device.
- Full audit and reporting. Monthly assurance summaries delivered automatically. Device status, firmware version, last-seen timestamps, and user association, all centrally visible.
Who it's for
Use cases where Loxada Secure makes the most difference
- Staff accessing data systems from home networks, serviced offices, or shared spaces outside IT team’s control
- Organizations with compliance obligations under HIPAA, DORA, NIS2, PCI DSS, or GDPR that extend to network environment controls.
- Boards and senior executives requiring an elevated, consistent security posture regardless of location.
- Contract and temporary staff on unmanaged networks who need secure access without additional software installation.
- Organizations deploying BYOD policies that include network-layer security without device management overhead.
- MSP partners managing distributed client estates that require centrally managed, low-touch network security.