OT security whitepapers and technical guides.

Technical deep-dives on Zero Trust architecture, compliance frameworks, and industrial network security.

Last updated: September 2026

Practical guides and architecture references for teams protecting industrial control systems, OT networks and critical infrastructure. Each one covers real deployment patterns: Zero Trust access control, CMMC Level 2, NERC CIP, IEC 62443 and protection for older machines. None of them requires a network redesign or production downtime.

SCADA Security: The Complete Guide

The six paths that reach SCADA, six controls that touch no controller, the standards map, a chapter per sector and a first-year plan. 38-page PDF.

SCADA security: the complete guide, cover

NY water cybersecurity: operator field guide

What the DOH/DEC rules require, the 2027 DOH and DEC deadlines, SECURE grant funding, and how small systems comply without new staff.

Securing water and wastewater control systems in New York

Preparing industrial networks for AI

Technical note. What changes with agentic AI, the 3 risks for OT, and the network as the only guardrail.

Preparing industrial networks for the arrival of AI

Beyond Purdue: micro-DMZs for modern OT

Why the Purdue Model and Industrial DMZ were never designed for today's OT, and how Micro-DMZs deliver Zero Trust without network redesign.

Overlay networks explained

How the Access Gate builds a secure virtual layer on top of your existing industrial network, no rewiring, no downtime.

Overlay networking diagram

Industrial DMZ design patterns

From flat networks to proxy-based segmentation, architectures that protect legacy OT without replacing equipment.

DoD Zero Trust for OT: alignment guide

Point-by-point mapping of DTM 25-003 requirements to Trout Access Gate capabilities across all 7 DoD OT-ZT pillars.

Securing Modbus in modern industrial environments

Architecture, risks, and practical security controls for a protocol that was never designed to be connected, but now is.

Typical path of a Modbus attack

Securing OPC UA: a practical guide for OT engineers

OPC UA was built with security from the start, and most servers ship with all of it switched off. What the model does, and how to close the gap.

Securing DNP3: authentication, encryption and what SAv5 misses

DNP3 Secure Authentication proves who sent a command. It does not hide what the command says. What SAv5 covers, and where encryption has to come from.

Securing MAVLink in connected robotic and UAV environments

Zero-trust architecture for MAVLink protocol security, threat analysis, cryptographic remediation, and practical deployment for UAV fleets.

MAVLink communication security threat model

Impeller technology validation

Independent performance benchmark: Impeller vs. Logstash for edge log processing.

FrostyGoop: A Comparative Analysis

Dragos vs SCADASEC on the Lviv heating incident, and why the ICS malware's threat level deserves a closer, evidence-first look.

FrostyGoop ICS malware analysis and the Lviv heating incident

PLC security: protecting programmable logic controllers

Why most PLCs run any valid command they receive, the six controls that actually protect them, and how to secure a controller without touching it.

Securing programmable logic controllers on the plant floor

OT microsegmentation with SIEM integration

Deploy microsegmentation as an overlay and stream every session to Splunk, Elastic, QRadar, or Sentinel over syslog. No agents, no rewiring.

OT microsegmentation deployment architecture with SIEM integration

CUI enclave architecture: an on-premise alternative to GCC High

An on-premise CUI enclave for CMMC Level 2. Roughly 87 of 110 controls covered, and how it compares to GCC High across 10 dimensions.

On-premise CUI enclave architecture for CMMC Level 2

IMR independent validation: overlay security for OT

Irish Manufacturing Research validated Access Gate as a reference overlay-security implementation. Five protocols, least privilege proven by denial, evidence mapped to IEC 62443 and ISO 27001.

Independent validation of overlay security for OT by Irish Manufacturing Research

Volt Typhoon OT defense: stop lateral movement

How living-off-the-land actors pivot from IT to OT, what CISA's 2026 guidance recommends, and how to break the path at the process edge.

Defending OT against Volt Typhoon lateral movement from IT to OT

Threat Intelligence and Mitigation for CCTV Systems

Research on threats to CCTV systems with strategies to mitigate risks. Outlines common vulnerabilities, recent cyber-attacks, and practical mitigation playbooks.