|||

Whitepapers & Guides

Technical deep-dives on Zero Trust architecture, compliance frameworks, and industrial network security.

Last updated: August 2026

Practical guides and architecture references for security and compliance teams protecting industrial control systems, OT networks, and critical infrastructure. Each whitepaper covers real-world deployment patterns, covering Zero Trust access control, CMMC Level 2, NIS2, IEC-62443, and legacy OT equipment protection, without requiring network redesign or production downtime.

NY Water Cybersecurity: Operator Field Guide

What the DOH/DEC rules require, the Jan 1 2027 deadline, SECURE grant funding, and how small systems comply without new staff.

Securing water and wastewater control systems in New York

NY Water Compliance: SECURE Grant + Jan 2027 Deadline

What the EFC SECURE grant covers, the 12-step DEC/DOH checklist, and how small systems meet the Jan 1, 2027 deadline without new staff.

EFC SECURE grant 12-step compliance checklist for New York water utilities

Preparing Industrial Networks for AI

Technical note. What changes with agentic AI, the 3 risks for OT, and the network as the only guardrail.

Preparing industrial networks for the arrival of AI

Beyond Purdue: Micro-DMZs for Modern OT

Why the Purdue Model and Industrial DMZ were never designed for today's OT, and how Micro-DMZs deliver Zero Trust without network redesign.

Overlay Networks Explained

How the Access Gate builds a secure virtual layer on top of your existing industrial network, no rewiring, no downtime.

Overlay networking diagram

Industrial DMZ Design Patterns

From flat networks to proxy-based segmentation, architectures that protect legacy OT without replacing equipment.

DoD Zero-Trust for OT | Alignment Guide

Point-by-point mapping of DTM 25-003 requirements to Trout Access Gate capabilities across all 7 DoD OT-ZT pillars.

Securing Modbus in Modern Industrial Environments

Architecture, risks, and practical security controls for a protocol that was never designed to be connected, but now is.

Typical path of a Modbus attack

Securing MAVLink in Connected Robotic & UAV Environments

Zero-trust architecture for MAVLink protocol security, threat analysis, cryptographic remediation, and practical deployment for UAV fleets.

MAVLink communication security threat model

Impeller Technology Validation

Independent performance benchmark: Impeller vs. Logstash for edge log processing.

FrostyGoop: A Comparative Analysis

Dragos vs SCADASEC on the Lviv heating incident, and why the ICS malware's threat level deserves a closer, evidence-first look.

FrostyGoop ICS malware analysis and the Lviv heating incident

PLC Security: Protecting Programmable Logic Controllers

Why most PLCs run any valid command they receive, the six controls that actually protect them, and how to secure a controller without touching it.

Securing programmable logic controllers on the plant floor

OT Microsegmentation with SIEM Integration

Deploy microsegmentation as an overlay and stream every session to Splunk, Elastic, QRadar, or Sentinel over syslog. No agents, no rewiring.

OT microsegmentation deployment architecture with SIEM integration

CUI Enclave Architecture: On-Premise Alternative to GCC High

An on-premise CUI enclave for CMMC Level 2. Roughly 87 of 110 controls covered, 3-6 week deployment, and how it compares to GCC High across 10 dimensions.

On-premise CUI enclave architecture for CMMC Level 2

IMR Independent Validation: Overlay Security for OT

Irish Manufacturing Research validated Access Gate as a reference overlay-security implementation. Five protocols, least privilege proven by denial, evidence mapped to NIS2, IEC 62443 and ISO 27001.

Independent validation of overlay security for OT by Irish Manufacturing Research

Volt Typhoon OT Defense: Stop Lateral Movement

How living-off-the-land actors pivot from IT to OT, what CISA's 2026 guidance recommends, and how to break the path at the process edge.

Defending OT against Volt Typhoon lateral movement from IT to OT

Threat Intelligence and Mitigation for CCTV Systems

Research on threats to CCTV systems with strategies to mitigate risks. Outlines common vulnerabilities, recent cyber-attacks, and practical mitigation playbooks.