OT Cyber Security

In a production facility the biggest risk is the network nobody can see. Security controls that have been standard on the office side for years are often entirely absent on the plant floor (OT): nobody knows which devices are on the network, connections to the PLC are not logged, and a classic antivirus simply cannot be installed on these devices.

Our approach

OT security cannot be built the way IT security is. We run no active scan that could risk stopping a production line. Instead we listen to the network with passive monitoring, build the asset inventory and a baseline of normal behaviour, and detect deviations from it.

Scope

• Asset inventory: automatic discovery of every PLC, HMI, inverter and engineering workstation on the network.
• Network segmentation: levelling according to the Purdue model and firewalling the IT/OT boundary.
• Intrusion detection: deep packet inspection of industrial protocols (Modbus, S7comm, DNP3, IEC-104, PROFINET, OPC UA).
• Vulnerability management: matching device firmware versions against CVE and ICS-CERT records.
• Remote access control: logging the vendor access used for maintenance.

Why us

OT security requires knowing both the industrial process and the cyber side. We are a team that already builds and commissions SCADA and PLC systems, so we design the security layer with the process in mind. On the platform side we work with OTDefend.