Beacon By SensorFu

Designed for customers who depend on
network segmentation

Always know if your network leaks

We designed SensorFu Beacon for organizations that rely on network segmentation, especially in OT environments. Beacons continuously test your isolated networks to verify that segmentation is truly working. In over 80% of deployments, SensorFu Beacon has uncovered critical gaps that led to stronger, safer systems. Knowing where the leaks are is the first step toward to fixing them.

Continuous Validation,
Minimal Friction

Beacons are intentionally lightweight, running silently in the background performing two test cycles: the Fast Loop, which completes in 30 minutes, and the Slow Loop, which spans 2-8 days. Their sole purpose is to 'reach home' by sending an escape test packet every second. These packets attempt to communicate across isolation boundaries using various methods over both IPv4 and IPv6 networks. If a Beacon reaches home, an alert is sent.

Deploy Where
It Matters

Rather than identifying 300 potential issues in one location, validate one critical security control across 300 locations. From energy substations and oil refineries to food and beverage production and logistics automation, SensorFu Beacon adapts to complex environments. Deploy it across multiple sites or mission-critical network segments to verify that segmentation policies remain effective and that existing controls keep high-value assets and critical systems isolated.

Quick and easy deployment

Beacons can be deployed as Linux or Windows applications, Docker containers, virtual machines, or dedicated devices, allowing you reuse your existing infrastructure. SensorFu Beacon integrates seamlessly with most SIEM systems, IDS solutions, and NDR providers. This makes rollout, monitoring, and long-term maintenance straightforward for security operations teams - even in large, distributed or highly regulated environments.

Firewall rules, routing, VPNs, switch VLANs, cabling - do you know if everything is working correctly everywhere, all the time? With SensorFu Beacon, verifying your most important security control becomes straightforward and continuous.

Beacon Application

Install the Beacon Application on Linux or Windows workstations, laptops, edge computing devices, or cloud deployments you need to keep safe. Runs on Linux, Docker and Windows.

Beacon Application Icon

Beacon Virtual

Launch the Virtual Machine Beacons inside VLANs and data centers to see whether they can call their Home. Available as both an OVA package and an ISO image, Beacon runs on VMware, VirtualBox, Hyper-V and other virtualization platforms.

Beacon Virtual Icon

Beacon Device

Use the Beacon Devices to validate network isolation without the need for an existing platform. Simply power them on, connect them to your network, and leave them in place. Works on Raspberry Pi*.

*) Raspberry Pi is a trademark of the Raspberry Pi Foundation

Beacon Device Icon

Breaking Out of Isolation - The Great Escape

Years of research into network protocols and escape techniques have been turned into a practical, automated test set.
Here's how it works:

The Basics:
TCP and UDP over IPv4 and IPv6 → All ports.
DNS Tunneling:
Use name server infrastructure to covertly sneak out.
Broadcasting:
Trigger improper routing decision in multihomed devices.
Spoofing:
Bypass firewalls and routers with spoofed IP packets.
ICMP:
We didn’t forget this one, how about your firewall config?
IP payload:
Find leaks related to easily forgotten protocols like IGMP and L2TP.
TLS test:
A content-aware firewall may pass TLS connections through the controls.

All this with almost zero configuration. And more to come in the future!

Looking for the Beacon documentation?

Beacon User Manual →

SensorFu Oy

Teknologiantie 11
90590 Oulu, Finland
Business ID: 2811349-6
© 2026 SensorFu. All rights reserved.