Cybersecurity for the systems that keep industry running.
Independent OT and ICS security assessments, audits, advisory and hands-on management for oil and gas, pipelines, utilities and industrial operators. Passive by default, with every change made through your approval process. Your operations stay in control.
The Gap We Close
Most operators have strong corporate IT and no one clearly accountable for the plant network. Control systems were commissioned by vendors years ago, firewall rules have never been reviewed, network drawings are out of date, and vendor remote access is often a flat VPN. We help you see it, document it and fix it in the right order.
Our Services
Asset Inventory & Registry
We build or refresh a usable inventory of your OT assets: controllers, HMIs, servers, network gear and communication paths.
IEC 62443 / CSA Z246.1 Gap Assessment
A structured comparison of your current program and controls against IEC 62443 and CSA Z246.1 requirements.
OT Visibility Snapshot
A time-boxed passive network capture from a mirror/SPAN port on your control network. No agents, no active scanning.
Firewall Rule Base Audit
A review of the firewalls between your business network, DMZ and control networks. We find overly permissive rules and risky services.
Network Documentation
Accurate, current network drawings and records of your control networks, built from site walkdowns, configurations and traffic data.
Architecture & Segmentation Review
We review how your networks are zoned and connected, using a zones-and-conduits approach (IEC 62443) and the Purdue reference model.
Backup & Recovery Readiness
We review whether you can actually restore controllers, HMIs, historians and workstations after an incident.
Hands-On Services
OT Firewall Management
We run your plant firewalls: rule changes through your change process, clean-ups, firmware updates and backups.
Patch Management Support
We track vendor-approved updates, check them before they go in and install them in your maintenance windows, with a rollback plan for each.
Industrial Switch Management
We maintain your plant-floor switches: network segments, unused ports off, secure access, firmware and backups.
OT Backup & Restore
We build offline backups of controller logic, HMI projects and system images, then prove they work with a scheduled test restore.
Server & Workstation Hardening
We lock down HMIs, historians, SCADA servers and programming workstations: unused services off, accounts tightened, USB controlled, without breaking vendor support.