CAPABILITY CONTRACT
Declare supported operations and data schemas.
CONNECTOR MARKETPLACE
Extend coverage.
Keep integrations governed.
SafeNetis uses read-only-first connectors, declarative manifests and controlled local packages to extend evidence coverage without overstating hardware readiness.
CONNECTOR MARKETPLACE
THE PROBLEM
Integration must not become an unmanaged trust boundary.
A connector should declare what it can read, which permissions it needs and what evidence it produces before activation. SafeNetis treats compatibility, approval and hardware validation as separate concerns.
Inspect, approve and isolate each package before local use.
HOW IT WORKS
A local, declarative and isolated package lifecycle.
→
MANIFEST
Describe permissions, dependencies and compatibility.
QUARANTINE
Inspect packages before local approval.
APPROVAL
Authorize use for a defined environment.
ISOLATED WORKER
Run the connector within a separated execution boundary.
OFFLINE MARKETPLACE
Manage approved packages without mandatory internet access.
CONNECTOR ECOSYSTEM
A governed catalog.
Not a wall of logos.
Every entry describes a capability, execution mode and readiness state. No status implies production qualification without appropriate validation.
08 ENTRIES SHOWNEXPLICIT MATURITY STATES
01 · PHYSICAL SECURITYLABORATORY AVAILABLE
ONVIF Discovery Reader
READ-ONLYDiscovery and metadata reading exposed within a controlled environment.
No official ONVIF conformance is currently claimed.
02 · PHYSICAL SECURITYPLANNED
Access Event Contract
CAPABILITY CONTRACTDeclarative model for access events, controllers, readers and zones.
Product direction with no availability claim.
03 · INFRASTRUCTUREEMULATOR-READY
CPS Asset Stream Emulator
LOCAL PACKAGESimulated stream of assets, relationships and observations for data-path testing.
Emulation does not replace target hardware validation.
04 · OT / ICSHARDWARE VALIDATION REQUIRED
Modbus/TCP Evidence Profile
READ-ONLY TARGETCautious observation profile for authorized registers and equipment identities.
Must be qualified on target hardware, firmware and configuration.
05 · OT / ICSPLANNED
OPC UA Observation Profile
MANIFESTProposed contract for qualified identities, hierarchies and observations.
No production compatibility is claimed.
06 · IT / CYBERPLANNED
SNMP Infrastructure Reader
READ-ONLY TARGETProposed collection of authorized identity and network-topology evidence.
Requires separate validation for each target system.
07 · INFRASTRUCTUREPLANNED
Inventory Package
DECLARATIVE IMPORTGoverned import of declared inventories with provenance and reference date.
An imported inventory remains a declaration, not an observation.
08 · PROTOCOLSLABORATORY AVAILABLE
Connector Manifest Schema
CAPABILITY CONTRACTSchema declaring capabilities, permissions, dependencies and produced evidence.
Demonstrated in the controlled SafeNetis laboratory.
Have a source to qualify? Start with its capability contract, permissions and target hardware.
Assess a connector →OPERATIONAL VALUE
Improve understanding
without hiding uncertainty.
Vendor-neutral model
Integrations are evaluated by capability and evidence.
Least privilege
Permissions remain tied to declared operations.
Deployment readiness
Compatibility and validation state are visible before use.
Local governance
Packages can remain controlled within the target environment.
CURRENT LIMITS
Precision about maturity is part of the product.
- 01Laboratory available does not mean production qualified.
- 02Emulator-ready does not replace target hardware validation.
- 03Planned indicates direction, not committed availability.
- 04No unvalidated hardware integration is presented as production-ready.
NEXT STEP
