Defend the grid without
disrupting the flow.
Legacy operational technology cannot withstand standard IT pentesting. We bridge the gap with non-disruptive, framework-mapped Automated Posture Exposure Assessments (APEA) designed specifically to validate the IT/OT airgap and satisfy FERC auditors.
CRITICAL INFRASTRUCTURE ASSESSMENT TOPOLOGY
Select a network zone to view compliance mandates and pentesting constraints.
Corporate IT Network
The Risk: The corporate network is the primary entry point for ransomware via phishing or exposed RDP. If compromised, attackers will attempt lateral movement toward the OT grid.
PENTESTING & COMPLIANCE APPROACH:
- Aggressive Scanning Permitted: Automated Posture Exposure Assessments (APEA) run at full speed.
- Compliance Focus: NERC CIP-004 (Personnel & Training), CIP-007 (Systems Security Management).
- Deliverable: Active Directory audit, phishing simulation results, and external attack surface mapping.
Industrial DMZ (Airgap)
The Risk: The DMZ acts as the buffer holding Data Historians and Jump Hosts. A misconfigured firewall rule here allows attackers to bridge the gap and send commands directly to physical equipment.
PENTESTING & COMPLIANCE APPROACH:
- Controlled Scanning: Validation of firewall ACLs and routing tables without disruptive packet flooding.
- Compliance Focus: NERC CIP-005 (Electronic Security Perimeter).
- Deliverable: Cryptographic proof of Multi-Factor Authentication (MFA) enforcement on all jump servers and verification of the IT/OT airgap.
OT / SCADA Control Layer
The Risk: This layer contains legacy PLCs and RTUs running physical grid infrastructure. Standard vulnerability scanners (like Nmap or Nessus) can overwhelm these fragile devices, causing physical plant shutdowns.
PENTESTING & COMPLIANCE APPROACH:
- NO ACTIVE SCANNING: Passive network traffic analysis (PCAP) and configuration file reviews ONLY.
- Compliance Focus: NERC CIP-007 (Patch Management for OT), CIP-009 (Recovery Plans).
- Deliverable: Agentless, read-only architectural reviews escalating to Anergi.io for deep-dive, offline hardware analysis.
Assessment Packages
Five tiers. Click a card to see price, contents, and launch.
Beginner · Free Mini S.P.A.
- ✓ Non-intrusive surface scan
- ✓ Gaps shown, remediation greyed out
- ✓ No install, no credit card
Urgent · Evidence Binder
$500 academy price
- ✓ Scan + questionnaire + generated binder
- ✓ Baseline framework mapping
- ✗ Not human-reviewed
- ✗ Not sealed
Remediation · Verified Binder
- ✓ 1 domain, binder + human review
- ✓ Cyber Seal by Anergi.io
- ✓ Quarterly rescans
- ✓ The evidence your carrier accepts
Networking · Multi-Domain
- ✓ Up to 5 domains
- ✓ Consolidated eBinder
- ✓ Unlimited SLM rescans
- ✓ Sealed on every domain
Enterprise · Up to 15 domains
- ✓ Consolidated eBinder, 15 domains
- ✓ Custom executive scorecards
- ✓ Named human review contact
- ✓ Carrier questionnaire walk-through
- ✓ Priority review