Home / Services / OT Security Testing
Offensive · Service

OT Security Testing — ICS · SCADA · Purdue model

ICS/SCADA Purdue-model assessments with safe, non-disruptive methodology for critical infrastructure operators.

Scope this engagement See related tools
IEC 62443NIST SP 800-82r3Purdue Reference Architecture
What's tested

Coverage that goes deep.

ICS/SCADA Purdue-model assessments with safe, non-disruptive methodology for critical infrastructure operators.

  • Purdue model network architecture review
  • ICS protocol analysis (Modbus, DNP3, IEC 61850, S7)
  • PLC / RTU / HMI assessment (passive)
  • Historian & engineering workstation security
  • IT/OT segregation validation
  • Vendor remote access review
  • Safety instrumented system (SIS) assessment
§ ENGAGEMENT SNAPSHOT
Timeline
15–25 business days
Methodology
IEC 62443
NIST SP 800-82r3
Purdue Reference Architecture
Category
Offensive
Re-test
Included after fixes

Every engagement is led by a CRTO/OSCP-certified senior engineer with named accountability.

Deliverables

What you get back.

A structured deliverable pack you can hand to engineers, auditors and the board.

DELIVERABLE 01

Purdue-model network map

DELIVERABLE 02

Vulnerabilities per zone

DELIVERABLE 03

IT/OT segregation review

DELIVERABLE 04

IEC 62443 gap assessment

Methodology

How we work.

PHASE 01

Scope

Confidential scoping call. We agree assets, environments, exclusions and timing.

PHASE 02

Test

Active testing per agreed methodology, with daily check-ins on critical findings.

PHASE 03

Report

Executive + technical deliverables. CXO presentation if you want it.

PHASE 04

Retest

Re-test included after your team applies fixes. Certificate issued on pass.

FAQ

Common questions.

Is this safe for live production?
Yes — we use passive monitoring and traffic capture. Active testing is only on test systems.
Scope this engagement

Tell us about your environment.

A 30-minute scoping call — confidential, NDA-protected, complimentary. Our senior security team will respond within 4 business hours.

  • Named senior engineer on every project
  • In-house tools in production · ISO 27001 aligned practices
  • 4-hour breach SLA · 5–10 day delivery