Establish your baseline.
Scope capture points, installation, integration and onboarding as a one-time engagement.
WHERE OTCOGNISHIELD FITS
Alongside your network.
Across OT, IoT & IIoT.
The Purdue model helps describe industrial functions. OTCogniShield adds passive visibility and risk context from the traffic you choose to observe.
L4 / L5Business context
Business & enterprise
Site IT, planning, ERP and corporate services.
L3.5Security boundary
Industrial DMZ
Controlled exchanges between IT and OT.
L3Selected traffic
Operations
Historians, MES and engineering systems.
L2Selected traffic
Supervisory control
SCADA, HMIs and operator stations.
L1Selected traffic
Basic control
PLCs, RTUs and networked controllers.
L0Process context
Physical process
Sensors, actuators and equipment; network visibility depends on their controllers and gateways.
IoT & IIoT do not fit in one level.
Connected sensors, building systems, telemetry devices and edge gateways may communicate across functional boundaries. We include their observed traffic in the same asset, risk and evidence workflow.
Coverage follows the capture.
Visibility depends on monitoring points, available traffic and supported protocols. Silent devices, isolated networks and encrypted payloads may need additional evidence. The platform can operate offline even when the observed environment includes connected gateways.
Simplified architecture illustration, not a deployment blueprint. Purdue levels describe functions; IEC 62443 zones and conduits are defined through risk assessment. Architecture context: NIST SP 800-82 Rev. 3.
A PRACTICAL ON-SITE OFFER
One appliance.
A clearly scoped site deployment.
Start with one on-site appliance for an agreed factory scope. Bring passive visibility, risk assessment and evidence together locally, with specialist consulting when you need it.
Plan ongoing visibility.
An annual platform subscription, with hardware provision and support terms defined in your proposal.
Add specialist support.
Consulting, managed monitoring and evidence reporting are scoped to your team’s needs.
Appliance capacity, capture coverage, traffic volume, retention and isolated zones are assessed during scoping. Some sites may need additional collection points or appliances. Platform commercial terms are being prepared through pilots; pricing is provided by enquiry.
Discuss your site deploymentNETWORK & TOPOLOGY
Put the appliance’s evidence in context.
Explore recorded relationship totals and a simplified view of the questions a communication path can raise.
See the topology view →