Fixed-scope assessments
A defined scope, timeline and report. Best for testing, reviews and readiness work.
OT and critical-infrastructure security
Industrial systems carry consequences beyond data. They are assessed with that in mind.
Industrial control systems were built for reliability, not for connection to the internet. We assess them carefully, without disrupting operations, for operators in utilities, ports, energy and district cooling.
What we deliver
- Assessments for industrial control systems in utilities, ports, energy and district cooling
How an engagement runs
- Scope
- We agree what is in and out of scope, the rules of engagement and who to call if something critical is found.
- Prepare
- Access, accounts and test windows are arranged so the work does not disrupt your operations.
- Deliver
- The assessment, design or readiness work itself, with progress updates at agreed points.
- Report
- Every engagement ends with an executive summary and a prioritised remediation plan.
- Verify
- Once fixes are made, we re-test or review them and confirm what has been closed.
How we engage
Managed security retainers
Ongoing monitoring, vulnerability management and advice, delivered with Kytheos.
Retained incident response
Agreed response arrangements in place before you need them.
Concessional SME packages
Assessments and awareness training sized for small and mid-sized businesses.
Begin with an assessment.
Our work follows recognised frameworks, including OWASP, NIST CSF and MITRE ATT&CK. Every engagement ends with an executive summary and a prioritised remediation plan.