A hardware-enforced security device that physically permits data to flow in only one direction, typically using an optical transmitter and receiver. It provides absolute network isolation to protect critical operational technology (OT) from external cyberattacks.