Core switching and fibre

Cybersecurity for IT and OT

We test and defend IT and OT networks, and we build and run them too.

Security assessment, penetration testing and standards work for corporate and control networks alike. We also design, maintain and supply the networks we defend, so the advice survives contact with the cabinet.

Book a scoping call Ask about a Site Assessment

A first call about one site. No charge, and nothing to commit to.

Cybersecurity is the main work, in IT and OT alike.

Assessment, penetration testing and standards worked to IEC 62443, NIST CSF 2.0 and ISO/IEC 27001, backed by the design, maintenance and procurement of the networks themselves. A control network is not a slower office network, and we do not treat it as one. A network is easier to defend when you drew it.

Find yourself by what you run

Start from the equipment in front of you.

A corporate network and datacentre

Core and firewalls, hypervisors and storage, domain controllers and backups.

802.1Q
OSPF/BGP
802.1X/RADIUS
SNMPv3

An identity estate and cloud tenant

Active Directory, Entra ID, certificate services, MFA and the Microsoft 365 tenant.

Kerberos
LDAP/LDAPS
AD CS
SAML/OIDC
RADIUS

Web applications and APIs

Customer applications, internal portals and the APIs behind mobile apps.

HTTP/TLS
REST
GraphQL
OAuth 2.0/OIDC

A plant or utility control network

SCADA and historians, HMIs, PLCs, RTUs and IEDs, and the industrial Ethernet between them.

Modbus TCP
DNP3
IEC 60870-5-104
IEC 61850
OPC UA

CCTV and access control

VMS and recorders, access-control servers, door controllers and the PoE network under them.

ONVIF (S/G/T)
RTSP
OSDP v2 Secure Channel
802.1X

Something nobody supports any more

Owned equipment or software whose vendor is gone or whose documentation never existed.

Undocumented protocols
Firmware
File formats

What we do

Security first, then the networks behind it

IT and OT security consulting Where an attacker gets in across IT and OT, and what closing it costs. Penetration testing Networks, Active Directory, web and APIs, tested on terms you signed. Policy and procedure design Standards work to IEC 62443, NIST CSF 2.0 and ISO/IEC 27001, and procedures people can follow. Reverse engineering How unsupported equipment and software actually behaves, written down. Network design and implementation Drawn before it is racked; the as-built set matches the cabinet. Maintenance and SLA The network and the servers it exists for, IT and OT, under one agreement. Backup and recovery design Backups proven by a restore you watch, not a green tick. Integration and configuration troubleshooting When two vendors blame each other, a packet capture settles it.

Also from the same desk

SOC 24/7 Round-the-clock detection and triage, tuned to your estate. Monitoring and NOC Link state, UPS runtime, and whether last night's backup finished. Hardware supply Procurement for IT and OT, staged and labelled before it ships. Network administration The day-to-day, as overflow or as the whole function. System integration Equipment from different vendors made to agree, point by point. Custom software Small tools for the gap between two products, with the source.

It starts with finding out what is actually on the network, because the drawings are usually older than the equipment.

See how it runs

Listen
Map
Cost
Test
Document and watch

See a deliverable before you buy one

No client logos, no invented statistics. Each lead service page shows a representative deliverable instead, with the client and site redacted.

ARTA CYBER Representative deliverable — client and site redacted.

A finding page, as you receive it

F-08 — Certificate template lets any domain user authenticate as a domain administrator

Severity: Critical · CVSS v4.0 9.4

What we found, how to reproduce it, the consequence and the fix, on one page.

Read the full finding

Products, alongside the work

Two products today, built alongside the services. There is room for more.

CertPilot

Live

A certification-readiness platform. Individual learners prepare for exams; organisations run their own training and examination panel, with their own courses and candidates.

OT Asset Simulator

In development

A browser-based industrial protocol simulator for rehearsing integrations and testing tools away from production. Modbus TCP and DNP3 work today; BACnet is in development.

If we are the wrong people for the job

If we are the wrong people for the job, we will say so and, where we can, point you at someone better. The scoping call is free.

Book a scoping call