We have formed a technology partnership with VyOS Networks. The joint solution layers adam:ONE®, which we describe as the world’s first Zero Trust resolver, onto the VyOS networking platform to secure cloud infrastructure, mission-critical on-premises operations and remote access traffic.
Under the agreement, ADAMnetworks is the main seller, marketplace item owner and primary support provider for the joint solution. VyOS supplies the routing, secure connectivity and deployment flexibility that organizations already use across bare metal, cloud and edge environments. adam:ONE supplies the Preemptive Defense layer: every Internet-bound connection is denied by default unless a verified device requests it, the destination is verified, and policy allows it.
Why default-deny instead of detection
Detection-and-response tools act after a signature, heuristic or behavior model fires. With AI-enhanced attacks, command-and-control and exfiltration may already be underway by then. We designed Preemptive Defense so detection becomes optional and containment is automatic. Because enforcement happens on the network rather than through an agent, it covers every device, user and protocol, including the IoT, OT/ICS and unmanaged endpoints that agent-based tools leave behind.
What runs on the VyOS platform
adam:ONE enforces Don’t Talk To Strangers (DTTS)®, our patented technology that treats DNS as a root of trust. A direct-IP connection is denied unless a verified device first requested that destination through DNS and policy permits it. ReflexAI™ writes allowlist decisions in under 20 milliseconds, so users and operators do not trade productivity for security posture. DNSharmony® aggregates protective DNS intelligence from multiple providers in real time, so a blind spot in a single resolver does not become an egress path for an attacker. How adam:ONE works covers the mechanism in more detail.
“Traditional Detection-Response solutions cannot keep up with the speeds at which attackers are moving with the help of adversarial AI. Bringing a Preemptive Defense capability to defenders in a practical and scalable way is critical for protecting the people and systems we all care about. Pairing that capability with VyOS gives infrastructure and security teams a world-first: default-deny Zero Trust Connectivity on a networking platform they can own, automate, and deploy anywhere,” said David Redekop, Founder and CEO of ADAMnetworks.
What the joint solution covers
- Network-layer enforcement. adam:ONE on VyOS stops ransomware, APTs, zero-days and C2 callbacks at egress, including unknown and detection-evading malware, before payloads execute.
- One posture across environments. The same policy covers cloud workloads, mission-critical on-premises segments and remote access users, with no endpoint agent required on every asset.
- Open networking stays open. VyOS remains the Linux-based routing, firewall and VPN foundation, automated and free of lock-in. We supply the security control plane and customer support.
- No decryption. Zero Trust Connectivity works within TLS 1.3, DoH, DoT and related encrypted flows, so it preserves sovereignty and stays viable as encryption standards advance.
- Less noise for SOC and IR teams. Denied connection attempts surface as high-signal events, and with egress control the threat behind them is already contained. When adam:ONE is applied to a network with a breach in progress, it can cut off C2 and exfiltration paths in hours rather than days.
“VyOS gives organizations the flexibility to build networking architectures around their real operational needs,” said Santiago Blanquet, Chief Revenue Officer at VyOS Networks. “Together with ADAMnetworks, we add a world-first Preemptive Security layer for infrastructure teams, security teams, and remote access users.”
Organizations can get adam:ONE on VyOS for cloud, on-premises and remote access deployments through ADAMnetworks, the primary commercial and support path for the joint solution.
