Loxada Secure
Control the network your team connects through.
The networks your people work from, brought back under your control.
Your staff connect to corporate systems from home networks, hotels, coworking spaces, and client sites, through routers you can’t see, patch, or trust.
Loxada Secure replaces that unmanaged connection with a managed router running our secure firmware, so the network edge is known and controlled wherever your people are.
The problem
The connection you can’t verify is the one attackers are using
Every time someone works outside the office, they connect through infrastructure your IT team has never seen. You can’t confirm the router’s firmware is current, whether its settings have been altered, who else is on the network, or whether it has already been compromised. That gap is not theoretical.
Since 2024, a Russian GRU unit has been changing the DNS settings on compromised consumer routers.
Known as APT28 they have attacked thousands of devices,including unpatched TP-Link models, so that people typing the correct web address for a service they use every day were quietly redirected to credential-stealing fakes. The redirection happened at the router, below the level endpoint security can see. US and UK authorities disrupted that network in April 2026. US FBI and UK NCSC advisories, April 2026 (APT28).
Agencies including the NSA, CISA, GCHQ, and the FBI have increasingly named network edge devices and unmanaged infrastructure as priority attack surfaces. The router is part of your security posture now, whether or not you control it.
How it works
A trusted network environment, wherever work happens
Loxada Secure works in three steps.
- We ship fully pre-configured, tested routers running Loxada’s proprietary firmware to your users. No software to install. No complicated setup.
- Each device creates a secure, encrypted connection to the Loxada Remote Private Network, logically isolated from the surrounding local infrastructure. The user connects to a consistent, trusted network environment from the moment they plug in.
- Your IT team manages the entire device estate centrally through the Loxada administration portal. Monitor status, manage assignments, push revocations, and receive monthly assurance reports, without needing direct access to individual routers.
What you get
What Loxada Secure gives you
- Complete firmware control. Proprietary firmware replaces manufacturer firmware on every device shipped. No vendor code remains. Read-only, tamper-resistant, persists after factory reset.
- Always-on encrypted connectivity. All traffic routes through an always-on encrypted tunnel to the Loxada RPN. No split tunneling. No exceptions.
- Security by default. DNS-level blocking of known malicious domains. Secure boot. Firmware validation. Encrypted management channel.
- Automated updates. Firmware updates and security patches are managed centrally by Loxada and applied automatically. No user action required. No dependency on manufacturer update practices.
- Hardware-agnostic architecture. Supports over 200 hardware models across multiple manufacturers. No single-vendor dependency.
- Network isolation. Each device is logically isolated from the surrounding local network. Unknown devices on shared Wi-Fi cannot interact with a Loxada-connected device.
- Full audit and reporting. Monthly assurance summaries delivered automatically. Device status, firmware version, last-seen timestamps, and user association, all centrally visible.
Where Loxada Secure fits
Use cases where Loxada Secure makes the most difference
- Staff accessing data systems from home networks, serviced offices, or shared spaces outside IT team’s control
- Organizations with compliance obligations under HIPAA, DORA, NIS2, PCI DSS, or GDPR that extend to network environment controls.
- Boards and senior executives requiring an elevated, consistent security posture regardless of location.
- Contract and temporary staff on unmanaged networks who need secure access without additional software installation.
- Organizations deploying BYOD policies that include network-layer security without device management overhead.
- MSP partners managing distributed client estates that require centrally managed, low-touch network security.