Zero Trust Security in Action: Airgap Ransomware Kill Switch

Airgap Networks
3 min readOct 23, 2020

If you can connect it, protect it! Designed on the top of Zero Trust Isolation Software-as-a-Service (SaaS) platform, the Airgap Ransomware Kill Switch can mitigate the impact of ransomware on a network to stop ransomware propagation per ransomware risk severity.

As soon as malware is detected. The “1-Click” shut off for all network connected devices can happen instantaneously from virtual local area networks (VLANs) to entire enterprise networks.

Mitigate attacks instantly

Airgap’s patent pending solution is the industry’s only solution that instantly locks down the entire network with a single click. Airgap Ransomware Kill Switch can be deployed on the network in minutes without any agents, forklift upgrades, or design changes.

The Ransomware Kill Switch stops data flow on the network instantly, all lateral traffic is paused. It is important to note that North-South activity, where users access applications such as email, Office 365, SFDC etc. will not be impacted.

Ransomware Kill Switch stops ransomware in its tracks, no lateral propagation and zero access to storage systems, and mission critical services such as storage, ERP, and backup systems.

Of course, there will be some expected “side-effects” for users e.g. printing and videoconferencing will stop working temporarily. Users will be not be able to access backup systems, as endpoints will be not be able to communicate with storage systems like Windows File Share (WFS) and transactions will be interrupted until Ransomware Kill Switch is set to safe access policy level. Schedule a demo to see how it works.

When ransomware is discovered on the network, the Airgap Ransomware Kill Switch can be switched to varying degrees of severity color coded as shown in the figure below, stopping ransomware propagation at source with “1-click”.

Protection with Airgap’s Ransomware Kill Switch

The incident response team can now get to work and investigate, secure in the knowledge that the infected device or devices are totally isolated. Once the Ransomware attack is sourced and eliminated the “1-click” can again be used in reverse to instantly normalize the network.

More about Airgap Networks

Airgap is a San Francisco Bay Area startup focused on providing protection for ransomware attacks. Airgap has a very unique perspective on some fundamental flaws in legacy network infrastructure designs.

Airgap’s Ransomware Kill Switch offers the best defense against cyber-threat propagation with patent pending solution that can be installed in minutes without any forklift upgrades. Trusted by leading managed service providers and enterprises, Airgap addresses some of the fundamental security challenges faced by the IT organizations. To learn more or to schedule a demo, please feel free to visit us at or contact us at



Airgap Networks

Zero Trust Isolation — The Best Defense Against Ransomware Propagation.