Fly-away cyber kits, explained.

A fly-away kit is a portable, self-contained set of computing and network equipment that a team carries to a site, such as a forward location, an incident or an isolated network, instead of relying on remote infrastructure. Rhombus Edge is Rhombus delivered as a fly-away kit, in a 4U rugged travel case.

FAK stands for fly-away kit. The term is also written fly away kit or flyaway kit, and cyber teams often say deployable cyber kit or fly-away cyber kit for the same thing.

Typically a rugged travel case holding servers, network switching and passive capture for a SPAN port or network tap, plus the software a team needs on site: network sensors, analytics, threat intelligence, forensics and malware analysis tools. Rhombus Edge adds cyber deception and a training range, all run from one console.

Rhombus Edge is a 4U short-depth rugged travel case sized for airline overhead bins. Weight and exact dimensions are available on request.

A fly-away kit should not depend on one. Rhombus is designed to operate fully air-gapped. Deployment, validation, patching, compliance scans and resets all run on the kit. Repositories can be synced when a connection is approved, but nothing requires one.

On Rhombus, updates arrive as signed, checksummed sustainment bundles that operators upload through the console or load from USB. Each bundle’s signature is verified before anything is applied, and a rollback point is kept for the kit’s update repositories.

A hunt forward kit is a deployable cyber kit a team carries to a mission or partner network to look for adversary activity on site. It typically combines passive capture, network sensors, a SIEM, threat intelligence and forensic tools. Rhombus Edge deploys all of them from one console, with no internet connection.

On Rhombus, mission services are rebuilt in place to the delivered baseline from version-controlled code, so the next team starts from a known-good state instead of a hand re-image or a trip back to the depot.

Rhombus runs DISA STIG compliance scans on demand from the console and exports ARF, HTML and STIG Viewer import files for your assessor. Scan results support your accreditation; they are not a certification.

Look past the hardware to what happens after power-on. Works with no internet connection, Proves it is working, Patches offline, with rollback, Produces compliance evidence on demand, Resets between missions and Captures passively. Ask the vendor to show each one on real hardware, offline.

Cyber protection teams, defensive cyber operations units, incident responders, training units and the program offices that equip them, especially teams that work in disconnected, contested or air-gapped environments.