The Supposed Paradox
Air-gapped means: the system runs on a physically separated network, with no connection to the outside. For critical infrastructure, defence environments, and NDA-bound manufacturing, that is often mandated or simply prudent — the reasons are described here.
The follow-up question arrives reliably in every conversation: "And how does the system stay current?" Behind it sits the justified worry of trading separation for obsolescence — and the cloud world's silent assumption that software withers without a standing connection.
Both deserve an honest answer.
How Updates Work Without Internet
Unspectacularly — and that is exactly the point: updates arrive as a package, not as a connection.
An update is assembled outside your network, brought into your environment on an approved medium, and applied on schedule — in a maintenance window you choose, at a version level you know in advance. At SynapSync, updates are included for three years as standard, extendable.
The often-overlooked advantage over the standing connection: control over timing. No cloud vendor silently pushes a new version overnight that changes your monitoring's behavior by morning. In audited environments, that is not a comfort feature but a requirement: every software state is known, documented, and traceable.
The Real Question: What Needs Freshness at All?
The more interesting question is rarely the update mechanism. It is: what would the system even need a connection for?
- Detection? No. The system learns the normal signal behavior of your equipment — locally, from live operation. That knowledge lives at your site and improves at your site, not in a data centre. There is no cloud feed that could teach your machine its own normality.
- The AI assistant? No. The language model runs on your hardware too. It doesn't need to know what happened on the internet yesterday — it needs to know your equipment, alarms, and history. Those live next door.
- The license? No. No activation servers, no remote revocation — by design. Licensed once, usable indefinitely. A system that must "phone home" periodically to keep working is not air-gap capable, whatever the datasheet says.
What remains are classic software updates (fixes, new functions, security patches) — and the package path covers those.
How to Spot Fake Air-Gap
The market carries offers wearing "air-gap capable" on the brochure and revoking it in the fine print. Three test questions:
- Does full functionality run indefinitely without any connection — or only an "offline mode" with reduced scope and an expiry date?
- What happens after 12 months without a connection? If the answer involves license checks, mandatory telemetry, or "periodic synchronization," it is not an air gap.
- Where does AI inference run? If models compute in the cloud and only results come back, the separation is cosmetic.
With us, air-gap is the delivery state, not a special mode — built for environments where connectivity itself is a risk. How deployment works in practice is covered in the deployment section, and for your environment's specific requirements: talk to us.