01
OT visibility
Issue
Assets, segments and industrial protocols are not reliably mapped.
Solution
The assessment reconstructs inventory, topology and protocols with passive tools.
security.assessment()
OT Assessment
When industrial cyber risk is perceived but not readable
An OT assessment is needed when industrial cyber risk is perceived but there is no concrete technical baseline on assets, networks, access paths and real vulnerabilities.
02
Real exposure
Issue
Remote access, vendors and network flows are misaligned with perceived risk.
Solution
Identifies access paths, privileges and surfaces to reduce or monitor.
03
Intervention priorities
Issue
Without an ordered view of risk, cyber investments may end up disconnected from production.
Solution
Orders technical and organizational actions by impact, effort and operational continuity.
operating method
How we work: 4 phases in sequence
01
Asset discovery
Inventory of all devices on the OT network: PLCs, HMIs, switches, gateways, industrial PCs.
02
Vulnerability assessment
Passive network scan to identify known vulnerabilities, obsolete firmware and risky configurations.
03
Segmentation analysis
Evaluation of current network segmentation against the Purdue model and IEC 62443 zones/conduits.
04
Report and recommendations
Document with findings, risk levels and prioritised remediation plan.
expected output
The outputs that must come out of a serious OT assessment
Value is not in the raw number of detected vulnerabilities, but in the ability to read them against industrial operations.
Representation of the OT architecture to understand where risk propagates and where to act.
Ordered list of technical and organizational actions based on risk, effort and operational continuity.
tech spec
Technical spec
explorer
architecture/ 2
operations/ 2
// baseline.inventory
OT asset inventory
analisi: PLCs, RTUs, HMIs, SCADA, industrial switches, gateways and exposed devices.
criticità: Undocumented assets, obsolete firmware, missing criticality classification.
output: Inventory with criticality, role and operational relations.
// baseline.segmentation
Zones, conduits and segmentation
analisi: Logical map of OT zones, conduits and passage points towards IT.
criticità: Missing or inconsistent segmentation, untracked network rules.
output: IEC 62443 zone diagram with flows and ownership.
// evidence.exposure
Exposure surfaces and paths
analisi: Remote access, technical accounts, exposed services and vendors.
criticità: Ungoverned privileges, ambiguous paths, weak separation.
output: List of surfaces to reduce or monitor.
// baseline.remediation
Remediation backlog
analisi: Technical vulnerabilities, organizational gaps, operational dependencies.
criticità: Unordered actions, unclear ownership across IT and OT.
output: Prioritized backlog with impact, effort and ownership.
next_step.initialize
Start an OT assessment
We build a technical baseline that plant, IT and management can all read.