E-STEX1500
A powerful industrial control system developed with domestic engineering for warning, excitation and synchronization.
DETAILS →A fully passive OT/ICS security platform providing visibility, intrusion detection and response for industrial networks.
OTDefend is a detection and response platform built for industrial control systems. Its tagline sums it up: "Secure the systems that keep the world running."
How it works
The platform connects to the network fully passively: it listens to traffic from a mirror (SPAN) or TAP port. It sends no packets to the PLC and performs no scanning, so it carries no risk of stopping production — which is precisely why actively scanning IT security tools cannot be used in OT environments.
Modules
- Network monitoring: deep packet inspection across 16+ industrial protocols — Modbus (TCP/RTU), S7comm, DNP3, EtherNet/IP, IEC-104, IEC 61850, PROFINET, EtherCAT, POWERLINK, CC-Link IE, OPC UA, BACnet, FINS, MELSEC, HART-IP.
- Endpoint agent: roughly 10 KB, runs on Windows XP through 11, installs no driver and needs no reboot; host-based detection with Sigma rules.
- Detection engine: 688 shipped rules — 484 network IDS signatures, 90 Sigma analytics, 71 YARA signatures — plus behaviour, baseline and ML-based anomaly detection.
- Threat intelligence: integrated TAXII 2.1 / STIX 2.1 feeds.
- Process safety envelopes: catches commands that are valid for the protocol but physically dangerous — an OT-specific capability absent from IT security products.
- AI OT analyst: a local, offline model; no data ever leaves the site.
Enterprise features
Multi-tenant architecture, high availability with failover, sensors capable of a one-way uplink through a data diode, and vendor-neutral response integration. It integrates with Splunk, IBM QRadar, CrowdStrike, Microsoft Defender, SentinelOne, Fortinet FortiGate, Palo Alto Networks, Check Point, ServiceNow and Jira.
Target industries
Energy and utilities, manufacturing, oil and gas.