# Donjon Appliance — Bill of Materials & Enclosure Plan

**Date:** 2026-03-26
**Status:** Research / Planning
**Author:** Cris (DonjonSec)

---

## Platform: NVIDIA Jetson Orin Nano Super Developer Kit

| Spec | Value |
|------|-------|
| GPU | NVIDIA Ampere (67 TOPS AI performance) |
| CPU | 6-core ARM Cortex-A78AE |
| RAM | 8GB LPDDR5 |
| Storage | microSD + M.2 Key-M 2280 (PCIe 3.0 x4) + M.2 Key-M 2230 (PCIe 3.0 x2) |
| WiFi/BT | M.2 Key-E 2230 slot (pre-populated with AzureWave AW-CB375NF) |
| Networking | 1x Gigabit Ethernet |
| USB | 4x USB 3.2 Type-A (10Gbps), 1x USB-C (data only) |
| Display | 1x DisplayPort |
| Power | DC barrel jack 5.5x2.5mm, 7-20V input (19V adapter included) |
| Dimensions | 100 x 79 x 21 mm (module + carrier) |
| TDP | Up to 25W (Super mode) |

---

## BOM — Per Unit

### 1. Compute Module

| Component | Product | Spec | Price (USD) | Notes |
|-----------|---------|------|-------------|-------|
| SBC | NVIDIA Jetson Orin Nano Super Developer Kit | 8GB, 67 TOPS | **$249.00** | Includes 19V PSU, WiFi/BT module, antennas |

**Included in box (no separate purchase needed):**
- 19V DC power adapter (barrel jack)
- AzureWave AW-CB375NF WiFi/BT module (pre-installed in M.2 Key-E)
- Dual PCB antennas
- Quick start card

**NOT included (must purchase separately):**
- microSD card
- NVMe SSD
- Display, keyboard, mouse (for initial setup only)

### 2. Storage — NVMe SSD (M.2 Key-M)

The dev kit has two M.2 Key-M slots: one 2280 (x4 lanes) and one 2230 (x2 lanes). Use the 2280 slot for maximum performance. 2230 drives work in the 2280 slot with a standoff/screw adjustment.

| Tier | Product | Form Factor | Capacity | Price (USD) | Notes |
|------|---------|-------------|----------|-------------|-------|
| Basic | Samsung PM991a (MZ-9LQ128C) | M.2 2230 | 128GB | ~$18-25 | Gen3, sufficient for OS + Donjon Platform, no AI models |
| Standard | Samsung PM991a (MZ-9LQ256C) | M.2 2230 | 256GB | ~$27-35 | Gen3, room for OS + platform + small AI model (0.5-3B) |
| Premium | Samsung PM991a (MZ-9LQ512C) | M.2 2230 | 512GB | ~$40-50 | Gen3, room for OS + platform + multiple AI models |
| Premium Alt | Kioxia BG5 (KBG50ZNS512G) | M.2 2230 | 512GB | ~$42-52 | Gen4, faster sequential reads (3,500 MB/s) |

**Recommendation:** Samsung PM991a is the most battle-tested 2230 NVMe on Jetson. Confirmed working by multiple users on NVIDIA forums. The 256GB is the sweet spot for Standard tier.

### 3. MicroSD Card (boot/backup)

| Product | Capacity | Speed | Price (USD) |
|---------|----------|-------|-------------|
| SanDisk Extreme microSDXC (SDSQXAA-064G) | 64GB | A2, V30, U3, 160MB/s read | ~$10 |
| SanDisk Extreme microSDXC (SDSQXAA-128G) | 128GB | A2, V30, U3, 190MB/s read | ~$15 |

**Recommendation:** 64GB A2-rated is sufficient. The microSD is only needed for initial JetPack flash and as emergency recovery. Primary OS runs from NVMe.

### 4. Power Supply

**Included with dev kit.** 19V DC adapter with 5.5x2.5mm barrel jack. No additional purchase needed for standard deployment.

For PoE deployment, see Optional section below.

### 5. Networking

| Component | Product | Price (USD) | Notes |
|-----------|---------|-------------|-------|
| Ethernet cable | Cat6 patch cable, 3ft | ~$3-5 | For scan network connection |
| Ethernet cable | Cat6 patch cable, 6ft | ~$5-7 | Longer option |

### 6. Enclosure / Case

| Option | Product | Material | Price (USD) | Mount Options | Notes |
|--------|---------|----------|-------------|---------------|-------|
| **A (Recommended)** | KKSB Jetson Orin Nano Super Dev Kit Case | Sandblasted black anodized aluminum | ~$22-30 | VESA 75, DIN rail (with clip) | Matte black, professional look, ventilation slots, SMA antenna cutouts. 142 x 95 x 53mm |
| **B (Budget)** | Waveshare JETSON-ORIN-CASE-A | Aluminum alloy | ~$12 | DIN rail (mounting holes reserved) | Active cooling support, power indicator LED, 40-pin ribbon cable access |
| **C (Premium)** | Custom CNC aluminum enclosure | 6061 aluminum, black anodize | ~$45-80 (MOQ 50+) | VESA, DIN rail, wall mount | Custom branding, tamper-evident screws, exact port cutouts |

**DIN Rail Clip (add-on for Option A):**

| Product | Price (USD) | Notes |
|---------|-------------|-------|
| KKSB DIN Rail Clip Bracket for Jetson | ~$14 | Steel, black powder coat, 35mm DIN rail compatible, 6 adjustable positions |

**Recommendation for initial production:** Option A (KKSB) for professional appearance. Option C for government/enterprise customers requiring tamper evidence and custom branding at scale.

### 7. WiFi/Bluetooth Module

**Already included.** The Jetson Orin Nano Super Dev Kit ships with an AzureWave AW-CB375NF (WiFi 5, BT 5.0) pre-installed in the M.2 Key-E slot. No separate purchase needed.

**Upgrade option (if needed):**

| Product | Spec | Price (USD) | Notes |
|---------|------|-------------|-------|
| Intel AX210 | WiFi 6E, BT 5.3 | ~$15-20 | M.2 Key-E 2230, requires driver support on JetPack |
| Waveshare AC8265 | WiFi 5, BT 4.2 | $22.99 | Confirmed Jetson-compatible, includes antennas |

### 8. Optional: PoE Module

| Product | Spec | Price (USD) | Notes |
|---------|------|-------------|-------|
| Waveshare JETSON-ORIN-POE-MODULE | IEEE 802.3af/at, 37-57V in, 12V 2.1A out | $12.99 | 21 x 92mm, requires pre-soldering PoE header on carrier board. Single-cable power + network. |
| UCTRONICS PoE Splitter U6109 | 802.3at, 5V/4A barrel jack output | ~$16 | External splitter, no soldering needed, less elegant |

**Note:** The Waveshare module is the cleaner solution but requires soldering a pin header onto the carrier board. For a production appliance this is fine (done once at assembly). The UCTRONICS splitter is a no-solder alternative but adds external cabling.

### 9. Optional: USB Ethernet Adapter (Dual NIC)

| Product | Spec | Price (USD) | Notes |
|---------|------|-------------|-------|
| Plugable USB3-E1000 | USB 3.0 Gigabit Ethernet | ~$15 | ASIX AX88179 chipset, Linux-compatible |
| Amazon Basics USB 3.0 Gigabit | USB 3.0 Gigabit Ethernet | ~$12 | Budget option |
| StarTech USB31000S | USB 3.0 Gigabit Ethernet | ~$18 | RTL8153 chipset, reliable Linux support |

**Use case:** Scan network on built-in GbE, management/reporting on USB GbE. Keeps scan traffic isolated from management traffic. Essential for enterprise deployments.

### 10. Shipping & Packaging (per unit)

| Item | Price (USD) | Notes |
|------|-------------|-------|
| Custom corrugated box (small, 8x6x4") | ~$1.50-2.00 | Printed with DonjonSec branding at MOQ 100+ |
| Foam insert (die-cut) | ~$2.00-3.00 | Protects appliance + accessories |
| Quick start guide (printed card) | ~$0.50-1.00 | Setup instructions, license activation |
| Anti-static bag | ~$0.25 | For the appliance |
| Cable ties / velcro strap | ~$0.25 | Cable management |
| **Packaging total** | **~$5-7** | |

---

## Enclosure Design Requirements

| Requirement | Spec | Implementation |
|-------------|------|----------------|
| Appearance | Industrial/professional, matte black | KKSB anodized aluminum (Option A) or custom CNC (Option C) |
| Ventilation | Passive + optional active for 25W TDP | Ventilation slots above heatsink, optional 40mm fan |
| Status LED | Visible from outside | Waveshare case has built-in power indicator; KKSB has 12mm pushbutton cutout (can use illuminated button) |
| Port Access | Ethernet, USB, DC power, DisplayPort | Both KKSB and Waveshare have precision port cutouts |
| Wall Mount | VESA 75 or screw mount | KKSB supports VESA 75 (75mm spacing) |
| DIN Rail | 35mm DIN rail | KKSB with DIN clip add-on; Waveshare has reserved mounting holes |
| Tamper Evidence | Government/cleared facility requirement | Option C: Torx/security screws + tamper-evident labels. Epoxy-filled screw heads for highest assurance. |
| Size | As compact as possible | KKSB: 142 x 95 x 53mm (~5.6 x 3.7 x 2.1") |

---

## Total BOM Cost — Three Tiers

### Basic Tier — Scan Only (no AI inference)

| Component | Product | Price |
|-----------|---------|-------|
| Jetson Orin Nano Super Dev Kit | NVIDIA (includes PSU, WiFi) | $249.00 |
| NVMe SSD 128GB | Samsung PM991a | $22.00 |
| microSD 64GB | SanDisk Extreme A2 | $10.00 |
| Ethernet cable | Cat6, 3ft | $4.00 |
| Enclosure | Waveshare JETSON-ORIN-CASE-A | $12.00 |
| Packaging | Box + foam + docs | $6.00 |
| **Total** | | **$303.00** |

### Standard Tier — With Small AI Model (0.5B-3B params)

| Component | Product | Price |
|-----------|---------|-------|
| Jetson Orin Nano Super Dev Kit | NVIDIA (includes PSU, WiFi) | $249.00 |
| NVMe SSD 256GB | Samsung PM991a | $30.00 |
| microSD 64GB | SanDisk Extreme A2 | $10.00 |
| Ethernet cable | Cat6, 3ft | $4.00 |
| Enclosure | KKSB Orin Nano Super Case | $26.00 |
| Packaging | Box + foam + docs | $6.00 |
| **Total** | | **$325.00** |

### Premium Tier — AI + Dual NIC + PoE

| Component | Product | Price |
|-----------|---------|-------|
| Jetson Orin Nano Super Dev Kit | NVIDIA (includes PSU, WiFi) | $249.00 |
| NVMe SSD 512GB | Samsung PM991a | $45.00 |
| microSD 128GB | SanDisk Extreme A2 | $15.00 |
| Ethernet cable (x2) | Cat6, 3ft | $8.00 |
| USB Ethernet adapter | Plugable USB3-E1000 | $15.00 |
| PoE module | Waveshare JETSON-ORIN-POE-MODULE | $13.00 |
| Enclosure | KKSB Orin Nano Super Case | $26.00 |
| DIN Rail clip | KKSB DIN Rail Bracket | $14.00 |
| Packaging | Box + foam + docs (premium) | $7.00 |
| **Total** | | **$392.00** |

---

## Comparison: Donjon Appliance vs. Alternatives

### vs. Commercial Vulnerability Scanners

| Solution | Hardware Cost | Annual Software License | Year 1 Total | Year 3 Total |
|----------|-------------|------------------------|---------------|---------------|
| **Donjon Appliance (Standard)** | **$325** | **Donjon Platform license (TBD)** | **$325 + license** | **$325 + 3yr license** |
| Tenable Nessus Professional | N/A (software only) | $4,790/yr | $4,790 | $14,370 |
| Tenable Nessus Expert | N/A (software only) | $6,790/yr | $6,790 | $20,370 |
| Qualys VMDR | N/A (cloud) | ~$5,000-15,000/yr (asset-based) | $5,000+ | $15,000+ |
| Rapid7 InsightVM (physical appliance) | ~$14,000 (appliance) | ~$5,000-15,000/yr | $19,000+ | $44,000+ |

**Verdict:** The Donjon Appliance hardware is 10-50x cheaper than commercial alternatives before software licensing. Even with a Donjon Platform license, the total cost of ownership is dramatically lower. The AI inference capability (67 TOPS on-device) is something none of these competitors offer in their appliance form factors.

### vs. Raspberry Pi 5 Build

| Spec | Donjon Appliance (Jetson) | Raspberry Pi 5 (8GB) |
|------|--------------------------|---------------------|
| CPU | 6-core ARM A78AE | 4-core ARM A76 |
| RAM | 8GB LPDDR5 | 8GB LPDDR4X |
| GPU AI | 67 TOPS (Ampere) | **None** (VideoCore VII, no CUDA) |
| Storage | NVMe (M.2 Key-M) | microSD or USB SSD (no M.2) |
| Ethernet | GbE (built-in) | GbE (built-in) |
| USB | 4x USB 3.2 | 2x USB 3.0 + 2x USB 2.0 |
| Board price | $249 | $80 |
| Total build (comparable) | ~$325 | ~$180-220 |
| AI model inference | Yes (0.5B-7B local) | **No** (too slow, no GPU) |
| OpenVAS scan speed | Fast (6-core + NVMe) | Slow (4-core + SD/USB) |

**Verdict:** Pi 5 saves ~$100-150 on hardware but cannot run AI models locally. Scan performance is notably worse (slower CPU, no NVMe, less RAM bandwidth). The Pi is fine for a hobbyist scanner but unacceptable for a commercial product. No GPU means no local AI-assisted vulnerability analysis, remediation generation, or natural language reporting.

### vs. Intel N100/N305 Mini PC

| Spec | Donjon Appliance (Jetson) | Intel N100 Mini PC | Intel N305 Mini PC |
|------|--------------------------|--------------------|--------------------|
| CPU | 6-core ARM A78AE | 4-core x86 (3.4GHz) | 8-core x86 (3.8GHz) |
| RAM | 8GB LPDDR5 | 8-16GB DDR4/DDR5 | 8-16GB DDR4/DDR5 |
| GPU AI | 67 TOPS (CUDA) | **None** (Intel UHD, no AI accel) | **None** |
| Storage | NVMe M.2 | NVMe M.2 | NVMe M.2 |
| Ethernet | 1x GbE | 1-2x GbE (some models 2.5GbE) | 1-4x 2.5GbE |
| Price (complete) | ~$325 | ~$130-180 | ~$200-280 |
| AI model inference | Yes (67 TOPS GPU) | CPU-only (very slow) | CPU-only (slow) |
| Power draw | 7-25W | 6-10W | 10-15W |
| Form factor | Compact, custom case | Varies, most are larger | Varies |
| x86 compatibility | ARM (some tools need porting) | Full x86 | Full x86 |

**Verdict:** N100/N305 mini PCs are cheaper and offer x86 compatibility (easier for some security tools). However, they have zero GPU acceleration for AI inference. The N305 with 4x 2.5GbE ports is interesting for a network appliance but still cannot match the Jetson's AI capability. If AI-assisted scanning is not needed, the N100 is a strong budget alternative. If AI is the differentiator (and it should be for Donjon), the Jetson wins decisively.

---

## Key Decisions Required

1. **Which enclosure?** KKSB (off-the-shelf professional) vs. custom CNC (higher MOQ, branded, tamper-evident). Recommendation: start with KKSB for first 50-100 units, then transition to custom.

2. **PoE or no?** Standard tier skips PoE. Premium tier includes it. PoE requires soldering the header at assembly time — manageable for production but not for end-user self-install.

3. **SSD capacity?** 256GB is the sweet spot. 128GB is tight if users want to run even small AI models. 512GB only needed for multiple large models.

4. **Dual NIC?** USB Ethernet works but is inelegant. For production, consider a custom carrier board (Seeed Studio reComputer, Forecr) that has dual GbE natively. This is a Phase 2 decision.

5. **Donjon Platform licensing model?** The hardware BOM drives the appliance price. The software license is where margin lives. Need to decide: perpetual, annual subscription, or per-scan pricing.

6. **ARM compatibility?** Donjon Platform is Python, so most code runs on ARM. Need to validate all scanner dependencies (nmap, OpenVAS, etc.) build and run correctly on JetPack/Ubuntu ARM64.

---

## Next Steps

- [ ] Validate Donjon Platform runs on JetPack 6.x (Ubuntu 22.04 ARM64)
- [ ] Benchmark scan performance on Jetson vs. x86 reference
- [ ] Test AI model inference (Ollama on Jetson) with qwen2.5-coder:0.5b and phi-3-mini
- [ ] Order KKSB case + Samsung PM991a 256GB for prototype
- [ ] Design pre-flash image pipeline (JetPack + Donjon Platform + models)
- [ ] Pricing model for appliance + software bundle

---

## Sources

- [NVIDIA Jetson Orin Nano Super Developer Kit](https://www.nvidia.com/en-us/autonomous-machines/embedded-systems/jetson-orin/nano-super-developer-kit/)
- [Jetson Orin Nano Hardware Specs](https://developer.nvidia.com/embedded/learn/jetson-orin-nano-devkit-user-guide/hardware_spec.html)
- [Jetson Orin Nano Getting Started Guide](https://developer.nvidia.com/embedded/learn/get-started-jetson-orin-nano-devkit)
- [NVIDIA Jetson Orin Nano on Amazon](https://www.amazon.com/NVIDIA-Jetson-Orin-Nano-Developer/dp/B0BZJTQ5YP)
- [KKSB Jetson Orin Nano Super Case](https://kksb-cases.com/products/kksb-jetson-orin-nano-super-developer-kit-case)
- [KKSB DIN Rail Clip Bracket](https://kksb-cases.com/products/kksb-din-rail-clip-bracket-for-nvidia-jetson-nano-orin-xavier-nx)
- [Waveshare JETSON-ORIN-CASE-A](https://www.waveshare.com/jetson-orin-case-a.htm)
- [Waveshare PoE Module for Jetson Orin](https://www.waveshare.com/jetson-orin-poe-module.htm)
- [Waveshare AC8265 WiFi Module](https://www.waveshare.com/wireless-ac8265.htm)
- [Compatible SSDs for Jetson Orin Nano (NVIDIA Forums)](https://forums.developer.nvidia.com/t/compatible-ssd-for-jetson-orin-nano/319643)
- [Supported M.2 Drives for Jetson Orin Nano](https://nvidia-jetson.piveral.com/jetson-orin-nano/supported-m-2-drives-for-jetson-orin-nano/)
- [Tenable Nessus Pricing](https://www.tenable.com/buy)
- [Plugable USB3-E1000 Ethernet Adapter](https://www.amazon.com/Plugable-Ethernet-Gigabit-10-100-1000-Compatible/dp/B00AQM8586)
- [Samsung PM991a SSD](https://semiconductor.samsung.com/ssd/pc-ssd/pm991-pm991a/)
- [Kioxia BG5 256GB on Amazon](https://www.amazon.com/KIOXIA-2230-30mm-NVMe-PCIe/dp/B0C62LCBYT)
