DF-06Foundational
SCADA/Historian Connectivity & TSDB
Gets the live sensor data out of the control system safely and stores it at full resolution, which almost nothing else on this site does.
Data FoundationIoTIT
HS-08IntermediateWave 2ITIoT
OT Cybersecurity Monitoring
In one sentence
Watches the control network passively for devices, traffic and commands that should not be there.
The problem
Most control networks have no inventory of what is connected to them and no record of normal traffic. A new engineering laptop, a modified controller program or an unexpected command sequence is invisible until something breaks.
How it works
Passive traffic monitoring via SPAN ports builds an asset inventory and a baseline of normal protocol behaviour per device, then alerts on new assets, protocol anomalies and unauthorised programming commands. Monitoring is strictly passive — no active scanning of production controllers, ever — and zones follow the Purdue model with IEC 62443 conduit definitions.
Data required
- SPAN or TAP access at the relevant network layers
- Network architecture documentation and Purdue zone definitions
- Asset inventory to the extent it exists
- Change management records for correlating legitimate changes
What you get
- Continuously maintained OT asset inventory with firmware and protocol detail
- Anomaly alerts for new assets, unusual traffic and controller programming changes
- Segmentation gap report against the target IEC 62443 zone model
What it cannot do
Passive monitoring sees only what crosses the monitored segments; an attack contained within an unmonitored cell is invisible, and serial and fieldbus links below the monitored layer are generally not covered. This is detection, not prevention, and it does not remove the need for segmentation, hardening and access control.
Every capability page states a real limitation. If a vendor cannot tell you where their product stops, you are not being told the truth about where it starts.
Related capabilities
- OP-07Foundational
Integrated Operations Center
One room, and one screen layout, where production, drilling, maintenance and HSE see the same numbers at the same time.
Operations DigitalizationIT - HS-02Intermediate
Gas Leak & Flame Detection
Adds optical gas imaging and flame detection on camera to the fixed point detectors, so a leak between detectors is still seen.
HSE, Emissions & SecurityAIIoT - HS-03Intermediate
Methane Monitoring & OGMP 2.0 Reporting
Builds a methane inventory from measurements rather than from emission factors, at the level of detail OGMP 2.0 actually asks for.
HSE, Emissions & SecurityAIDomain - HS-07Intermediate
Drone & Robotic Inspection
Flies or drives the inspection route so that people do not have to work at height or enter confined spaces as often.
HSE, Emissions & SecurityIoTAI