Product tour

From first policy
to audit report.

SOVA is Steelborn's network access control for wired, Wi-Fi and VPN access, with 802.1X, MAB and RADIUS. Follow Weserhof Logistik, a fictional company with three sites and 250 devices, through its first days with SOVA. Then see what it costs.

  • Authentication on your own appliance
  • Appliances and high availability included
  • Cloud records hosted in Germany
  • 30-day trial with SOVA Brain
SOVA console overview: today's access activity against its normal pattern and live decisions per site
SOVA Brain finding: Device type changed, critical Closed mode impact preview: 8 sessions would be denied at the next authentication, 142 unchanged

Chapter 1 · Day one

Go live without the fear.

The hard part of network access control is the step from watching to enforcing. SOVA shows you the effect before you switch, switches when you are ready and undoes a change just as fast.

  1. Visibility

    See everything on your network first.

    Start in Monitor mode. Every device connects, and SOVA shows what it is, where it connects and whether it is approved. Weserhof sees 250 devices across three sites, 240 of them recognised automatically.

    SOVA Network Visibility: 250 devices by group, 91% approved, devices awaiting a decision and devices per site
  2. Policies

    802.1X for people. MAB for things.

    Company laptops sign in over 802.1X with a certificate or a password. Phones and printers that cannot do 802.1X use MAB. Each policy puts them on the right VLAN.

    SOVA Policy Studio: policy sets for laptops with EAP-TLS and PEAP, IP phones and printers with MAB, each with its VLAN
  3. First devices

    A new printer? One click.

    New devices wait for your decision. Approve one and its access follows your policies. Deny it and it stays out.

    SOVA Network Visibility: a new Brother printer at Hannover Depot awaiting a decision, with Approve and DenyThe printer approved: Device approved, access follows your policies
  4. Live

    Every decision, as it happens.

    Accepted and rejected requests per method, live, with today's totals and every active session in view.

    SOVA Live Operations: access decisions of the last 15 minutes by method, with sessions and totals
  5. Monitor → Closed

    Enforce without surprises.

    In Monitor mode every device connects while SOVA records what your policies would decide. Before you switch to Closed, the impact preview shows exactly which sessions would be denied. Open sessions are not dropped, and Monitor is one click away.

    SOVA access mode: Monitor active, Closed previewed; 8 sessions would be denied at the next authentication, 142 unchanged
  6. Undo

    Changed something you regret? Restore it.

    Backups are taken automatically. Restore any of them in one step at every site. SOVA saves your current configuration first, so you can always come back.

    SOVA Backup and restore: restoring the configuration from the day before at all three sites, with a backup of the current configuration taken first

Chapter 2 · Every day

Run it in minutes a day.

One console for every site. SOVA watches the network around the clock and tells you what needs a decision. You decide.

  1. At a glance

    Your whole network, on one screen.

    Today's access activity against its normal pattern, every site live, and everything that needs you in one list.

    SOVA Overview: today's network activity against its normal pattern, live decisions per site
  2. Respond

    Quarantine in seconds.

    Re-authenticate, quarantine or block a session straight from the live view. Every quarantine and block is recorded with the reason you gave.

    SOVA session actions: Re-authenticate, Quarantine and Block on an active session
  3. SOVA Brain SOVA Intelligence

    It follows every change for you.

    A printer acting differently, a user connecting from a new site, a camera sending more than usual: SOVA Brain follows each change, tells you where it stands and records the result when behaviour returns to normal.

    SOVA Brain daily work: I am following 3 behavior changes, with follow-ups opened, results recorded and follow-up cards
  4. SOVA Brain SOVA Intelligence

    It notices what doesn't fit.

    A printer's address that suddenly behaves like a Windows workstation is a classic sign of MAC spoofing. SOVA Brain puts it at the top of your list, along with unusual connection times and places, repeated denied access and silent switches.

    SOVA Brain review priorities: Device type changed (critical) and Repeated denied access (high)
  5. SOVA Brain SOVA Intelligence

    Every finding explained, with a recommendation.

    See what was expected, what was observed and what SOVA recommends. Accept a change you expect, resolve a finding or mark a false positive. SOVA Brain never blocks or quarantines on its own: you decide.

    A SOVA Brain finding: expected Printer, observed Windows workstation, with findings and the SOVA recommendation

Chapter 3 · Before the audit

Ready for NIS2 and ISO/IEC 27001.

Auditors ask who connected, where, when and under which policy. SOVA keeps the answers ready, helps you write the policy itself and shows what is still missing, weeks before the auditor arrives.

  1. Readiness

    Know where you stand, in one click.

    Check readiness against ISO/IEC 27001 controls, NIS2 Article 21 and GDPR. Each control shows Verified, Action required or Evidence pending, with what to do next. A control that does not apply can be marked out of scope, with your reason on record.

    SOVA audit readiness: 16 verified, 2 action required, 2 evidence pending, with controls such as ISO/IEC 27001 5.18, 8.5, 8.13 and NIS2 Article 21
  2. Your policy

    Your Network Access Security Policy, written with you.

    SOVA prepares the policy from your answers and your logo. You approve it. Versions, approvals and review dates are kept, and SOVA tells you what is still missing before approval and when a review is due. Already have a policy? Use your own.

    SOVA organization policy: version 1 approved, review date, PDF and DOCX downloads, a new draft ready for approval
  3. Your policy

    A document you can hand to the auditor.

    Download the approved policy as PDF or Word, with your logo, owner, approver, effective date and next review.

    Cover page of a Network Access Security Policy with the company logo, approval and review dates
  4. Reports and evidence

    Reports for management. Evidence for the auditor.

    Create an executive report in one click. For the audit, download one evidence package for the period: your policy, the readiness summary and the access records behind it.

    Cover page of a SOVA executive network access report

Chapter 4 · The price

One licence. No hidden costs.

You pay for the endpoints connected at the same time, for your whole organization. Appliances, sites, high availability, updates and support are included. Build your own receipt.

How SOVA fits your network Three sites, each with SOVA Appliances in the customer's own network; Bremen HQ runs a high-availability pair. Authentication happens on the appliances. Service records go to the SOVA cloud console, hosted in Germany. YOUR NETWORK Bremen HQSwitches · Wi-Fi · VPN Hamburg WarehouseSwitches · Wi-Fi Hannover DepotSwitches · Wi-Fi SOVA AppliancesHigh-availability pair SOVA ApplianceAuthentication on site SOVA ApplianceAuthentication on site Service records SOVA CLOUDOne console for every sitePolicies, reports, SOVA BrainHosted in Germany, EU
Appliances, sites and high availability cost nothing extra. One licence covers the whole organization, and authentication keeps running in your own network.
Plan
Endpoints connected at the same time

Growing? Add capacity in steps of 100 from the licence page. More than 500 endpoints at once? We prepare a quote.

Steelborn · SOVA

SOVA Intelligence

100 concurrent endpoints · per month

  • Licence€249
  • SOVA Brainincluded
  • 3 sites€0
  • 4 SOVA Appliances€0
  • High availability · 1 pair€0
  • Annual maintenance€0
  • Updates, new features and support€0

Total per month€249

Excl. VAT · All plans

Chapter 5 · Your turn

See it on your own network.

30 days, 100 concurrent endpoints, SOVA Brain included. Install the SOVA Appliance on a virtual machine, point your switches and Wi-Fi at it and start in Monitor mode.

Questions IT teams ask us

Do we pay for SOVA Appliances?

No. The appliance software is included in your subscription. You install it on your own virtual machines or servers, at any site, as many as you need. There is no per-appliance fee and no appliance limit.

Is high availability included?

Yes. Run a primary and a secondary appliance at any site. HA pairs share your licence capacity; there is no separate HA licence.

Which switches and Wi-Fi does SOVA work with?

SOVA uses the standards: 802.1X, MAB and RADIUS, including Change of Authorization. It works with switches, wireless controllers and VPN gateways that support them, from any vendor.

How does SOVA help with NIS2 and ISO/IEC 27001?

SOVA prepares your Network Access Security Policy with your logo for you to approve, checks readiness against ISO/IEC 27001 controls, NIS2 Article 21 and GDPR, shows what is verified and what needs action, and gives you reports and an evidence package to download. SOVA prepares evidence; it does not certify.

What happens if we connect more endpoints than our licence?

Nothing is blocked. The console shows your usage, and you add capacity in steps of 100 or move to a larger plan when you are ready.

What data reaches the cloud?

Service records such as usernames, MAC and IP addresses, device types, session details and access decisions. Network traffic content and business files stay in your network. Cloud records are hosted in Germany.

What if our internet connection fails?

Authentication runs on the SOVA Appliance in your own network, so a short internet outage does not stop network access.

Can we change plans or get a refund?

Yes. Upgrade from the licence page at any time; downgrades take effect at your next renewal. If you are not satisfied, you can ask for a full refund of any payment within 14 days.

What is included in the free trial?

30 days with 100 concurrent endpoints and SOVA Intelligence, so SOVA Brain is included. You run it on your own network.