What we do
What we do
Four services. Most plants start with the first.
We start with a list of what is on your network. The other three build on it.
01 · The list
What have you actually got?
We find every device connected to the plant network and build a list. Most factories genuinely do not know what’s on their own floor: machines installed by a contractor years ago and never documented, laptops permanently plugged into the line, remote connections nobody remembers opening. It is common to find far more devices than anyone had listed.
We do it passively, listening to network traffic rather than sending anything into it. Nothing is sent to your equipment. The output is a document the plant manager can hold.
02 · The ranking
How bad is it?
We take that list and rank what could go wrong, worst first, in language a plant manager uses. Not “you have 47 critical vulnerabilities,” but “if this laptop in accounts is infected, your bottling line stops, and based on your output that’s for example, roughly AED 400,000 a day.”
You get a cost in dirhams, not a severity score.
03 · The fixes
Fix the big things
Usually two or three things account for most of the risk. Segmentation: a proper barrier between the office network and the machine network, the single highest-value thing we do. Remote-access control: accounting for every vendor dial-in, closing what isn’t monitored. Wrapping the old machines that can’t be patched with protection around them instead.
Each fix has a clear end, and you see the before and after.
04 · Monitoring
Keep watching
A monthly service. We watch the plant network and tell you when something changes or looks wrong.
05What it looks like on site
A capture at the switch, a walk round the cabinets.
The first service is two days of listening and one day of walking. A mirror port on the switches that matter, agreed and timed with you; a capture that runs while the plant does what it does; and a cabinet walk-down to see what the traffic cannot show, the modem with an antenna, the laptop on the line.
What you get is a list, a drawing of the floor as it is, and the three or four paths that would let a stranger command something. How we work sets out the rules; the industry pages describe what the list tends to contain in yours.
and then
The same data answers other questions.
Once we’ve done the above, we’re sitting on a live feed of what’s happening in the plant. The same data tells you when a pump is about to fail, where energy is being wasted, why quality dropped on Tuesday. We can talk about that once you have the list.