Pearl device operating system security architecture

Applies to: Pearl-2, Pearl Mini, Pearl Nano, Pearl Nexus.

Pearl devices run a custom, minimized Linux distribution stripped down to the libraries and packages required for the device's functionality, which reduces the available attack surface. All network ports and services that are not explicitly required for operation are disabled by default.

The operating system and firmware are installed on a read-only partition that cannot be modified after installation, preventing tampering with system files or the introduction of malicious code. Pearl devices also enforce a strict separation between system data and user data, such as recordings and images, preventing unauthorized access to or modification of critical system files through user-accessible storage.

Pearl-2, Pearl Mini, and Pearl Nexus additionally support a secondary network interface using a USB-to-Ethernet adapter (firmware 4.24.0 and later; not supported on Pearl Nano — see Device differences above). Routing between the two network interfaces, when both are connected, is not supported.