IoT / OT
IoT and OT security
Cameras, controllers, sensors and machines that shipped with no security, cannot be patched, and were never meant to be on a network at all. We find them, separate them, watch them, and stop them talking to strangers.
The devices nobody owns
Operational technology outlives the company that installed it. A production line bought in 2011 runs an operating system that stopped receiving updates a decade ago, and it cannot be taken off the network because the maintenance contract requires remote access. These devices are also the ones with hardcoded passwords and no logging, which is why they are a favourite way in.
What you get
- Passive discovery that does not disturb a production network
- Segmentation, so a compromised camera reaches nothing worth reaching
- Egress control — most of these devices have no legitimate reason to call the internet
- Monitoring tuned to protocols a normal SIEM does not understand
- A compensating-control plan for everything that genuinely cannot be patched
HOW IT WORKS
From first call to steady state
-
Discover
Passive listening first. Active scanning has been known to stop production lines, so it comes later and by agreement.
-
Classify
What each device is, what it talks to, what it needs to talk to, and what it has been talking to that nobody authorised.
-
Segment
Network zones with enforced boundaries, designed so the maintenance access the vendor needs does not become the access an attacker uses.
-
Monitor
Watched by the same operations centre as the rest of the estate, so an OT alert is not somebody else's problem.
-
Sustain
Reviewed whenever a device is added, which in practice means whenever a supplier installs something without telling anyone.
WHAT THIS ANSWERS
The obligations this covers
This is not a marketing claim. Each of these regimes names the requirement that this service is the answer to, and the page behind it says which clause.
- In force now RED / EN 18031 Product refused or withdrawn from the market
- Draft in parliament CER The same entities as ZInfV-1
Who this is for. Manufacturing, energy, water, transport, healthcare and any building with cameras, access control or a building-management system.
THE REST OF IT
Delivered by the same team
Start with a conversation, not a quote
Tell us what you run and what you are being asked to prove. We will say what this would involve at your size, and whether you need it at all.