Hold the perimeter.
Drop what doesn't belong.
Hammerhead Firewall is an open perimeter family engineered by Megalodon: stateful inspection with Suricata inline IPS, WireGuard and IPsec access, onboard AI agents — the same hardened, auditable platform as the Hammerhead sensors, from a branch-office box to a clustered enterprise edge.
Three sharks. One perimeter.
Same hardened software on every model — Rocky Linux base, containerized, orchestrated from Akula or fully standalone. The red badge marks the Firewall line; the chassis family is shared with the Hammerhead sensors.
Mini Hammerhead FW
Branch offices and small networks — full perimeter defense in a fanless desktop box.
- Throughput up to 1 Gbps inspected
- Interfaces 2× 1GbE
- Form factor compact · silent
- Deployment standalone
Hammerhead FW
Purpose-built 1U firewall for organizations up to ~500 concurrent talkers.
- Throughput up to 10 Gbps inspected
- Interfaces 4× 10GbE SFP+
- Form factor 1U rack
- Deployment standalone or HA pair
Great Hammerhead FW
A clustered pair of high-resource nodes for enterprise edges and datacenter perimeters.
- Throughput up to 40 Gbps inspected
- Interfaces up to 32× 10GbE
- Resilience stateful failover
- Deployment active/active HA pair
Open stack.
Nothing to take on faith.
Every model runs the same hardened, containerized stack on a Rocky Linux base — stateful filtering, Suricata inline, WireGuard and IPsec you can inspect, not a black box you have to trust.
Direct connection to Akula: the whole fleet from a single pane of glass, configuration converging every 10 minutes. Or run any firewall fully standalone.
Pair the firewall with a Hammerhead sensor: the perimeter blocks, the sensor sees everything behind it — one family, one console.
Operate it yourself, or let the Megalodon SOC run it as part of MEG-720.
WAN, LAN, DMZ and guest segments with policy between every zone — deny by default.
Connection-tracked filtering on every flow that crosses the perimeter.
Suricata on the wire — malicious traffic is dropped, not just reported.
Talos and Proofpoint ET Pro rulesets, updated continuously across the fleet.
WireGuard and IPsec — site-to-site tunnels and remote access for your team.
An onboard automation platform where AI agents enrich, triage and respond.
Direct connection to Akula — the whole fleet from a single pane of glass, or fully standalone.
Put a shark at
the door.
A guided demo with the engineers who built it — and sizing guidance for your edge, segments and throughput.