Self-assessment·~2 min
OT Security Quick Score
A free 10-question self-check for the people who actually run control systems. Answer honestly about your site and get a red / amber / green signal with a prioritised fix-first list — mapped to NCSC CAF and IEC 62443.
Read guide
Getting started·8 min read
Controls Engineer's Guide to OT Cybersecurity
You already understand risk. This guide maps functional safety concepts — HAZOP, SIL, IEC 61511 — directly to OT cybersecurity, so controls engineers can apply what they already know.
Read guide
Vulnerability management·7 min read
How to Read an NVD CVE Report (and Find the Real Fix)
NVD pages are dense — a CVSS score, a description, and a wall of reference links with no obvious next step. What each part actually tells you, which reference link has the fix, and a real worked example.
Read guide
Standards·10 min read
IEC 62443 Explained: The Industrial Cybersecurity Standard
A plain-English guide to IEC 62443. What the standard covers, how its parts fit together, Security Levels, zones and conduits — and where to start.
Read guide
Network security·12 min readFree account
OT Network Segmentation: Zones, Conduits & the Purdue Model
How to apply the Purdue model and IEC 62443 zones and conduits to reduce attack surface in a real industrial network. Includes common mistakes and practical steps.
Read guide
Functional safety·10 min readPro
SIL Verification Explained: PFDavg, Proof Tests & Documentation
The three barriers every SIF must clear under IEC 61511 — PFDavg, architectural constraints, and systematic capability — plus the pitfalls that most often invalidate the calculation.
Read guide
Protocols·8 min readPro
OPC UA Security Configuration: A Step-by-Step Guide
Security modes and policies, application certificates and trust lists, user authentication — and the misconfigurations that quietly undo all of it in production.
Read guide
Protocols·7 min read
Modbus Security: Understanding the Risks and Mitigations
Modbus has no authentication, encryption, or integrity protection. The real attack vectors, and the practical mitigations available without replacing a single device.
Read guide
Standards·9 min readFree account
NIST CSF 2.0 for OT: What Changed and What It Means
The new Govern function, expanded supply chain guidance, and broadened scope — what CSF 2.0 means for industrial environments and how to use it alongside IEC 62443.
Read guide
Daily briefing
Know what's out there
The OT threats, vendor advisories and standards changes that affect your systems are published every day. The Control Signal brief makes sure you hear about them, and what they mean for you. Free, every morning.
Get tomorrow's brief free