Manufacturers
Cybersecurity for the plant floor, without stopping a line.
Customers, insurers, and defense contracts now ask about the machines, not just the office. We assess the plant floor, answer the questionnaires, and fix what needs fixing. Most of it is remote, and we don't touch a running controller.
Who is asking
Your customers
Supplier security questionnaires from OEMs and primes now ask about the plant floor, not just email and laptops.
Who is asking
Your insurance carrier
The renewal asks about remote access, a second login step, backups, and whether the plant network is separate.
Who is asking
CMMC, if you build for the DoD
Under Level 2, plant equipment counts as a Specialized Asset. It has to appear in your asset inventory, your security plan, and your network diagram.
What we do
Assessment, answers, fixes, and the paperwork.
| Assessment | PLCs, HMIs, robots, historians, and every remote path into them, including machine builders and integrators. |
| Questionnaire answers | Your customer or carrier questionnaire filled out accurately. Answers that would cost you get fixed first. |
| CMMC plant-floor scoping | Inventory, network diagram, and security plan language for the Specialized Assets on your floor. |
| Fixes | Plant network separated from the office, remote access locked down, vendor access with an off switch, backups restored to prove they work. |
| Ongoing coverage | Monitoring, a quarterly review, and documentation kept current for the next questionnaire or renewal. |
How the work is done
Remote by default. Your maintenance staff or your local IT provider are the hands on site. Our engineers do the analysis, and a senior engineer reviews every report before it goes out. We don't run active scans against a running line.
What we won't do
Issue a CMMC certification, scope your office IT for CMMC, or do machine safety and physical security. We work alongside whoever handles those.
Plants on the water
If your plant operates under a Coast Guard Facility Security Plan, a Cybersecurity Plan is due July 16, 2027. See what is required.
What it costs
A set price, quoted before you sign.
Priced by the number of plants and production lines. One call to count them, and you get a fixed number. No hourly billing and no change orders.
Who you get
Twenty-five years inside plants, at a set price.
A method run on more than 500 live plants, written down so it comes out the same every time, whoever runs it. A senior control-system engineer signs off on your report before it leaves the building.
25+ yrs
inside live plant control systems
500+
plant-safe assessments and penetration tests worldwide
4,500+
people trained on plant cybersecurity
A founding contributor and editor of ISA/IEC 62443 and the early NERC CIP standards.