Industrial networks.
Secured from
the inside out.

A flat network where IT and OT share the same broadcast domain is the most common finding we encounter. We start with an assessment to map what you have and identify the highest risk exposure points, then design the segmentation architecture from there. We do not prescribe a particular firewall vendor or product. We design the architecture and rule logic and you implement it with your preferred tools or we can advise on the implementation review.

Yes. We produce the zone and conduit analysis, the security level assessment for each zone and the gap analysis between your current state and the target security level. We write the technical documentation in the format that certification bodies expect and can attend technical review sessions with your auditors to answer questions. We do not act as the certification body itself but we prepare everything the certification body needs to complete their review.

Compensating controls. When the vulnerable device cannot be patched we design the network segmentation and monitoring around it to reduce the attack surface to a minimum and detect any anomalous behaviour. This is standard OT security practice. We document the compensating control for each unpatched system and include it in your risk register so it is visible to auditors and management as a tracked accepted risk rather than an unknown one.

Our services are IT consulting and security services only. We assess, design, document and advise. We do not install hardware, configure physical switches or perform any field engineering work. We produce detailed implementation documentation that your IT team or your OT integrator can execute. Where needed we can review the implementation against the design and confirm it meets the intended security architecture. We can recommend trusted OT system integrators for the physical implementation work if you do not have one.