Iris Remote AccessOT / ICS · 2027
Brokered vendor access for OT sites. Approved, recorded, time-limited sessions without a VPN to the plant floor.Join the waitlist →Products
Software our engineers built for problems we kept seeing in the field.
Built for OT first. License it on its own, or have it deployed by the engineers who wrote it.
01 · Patch managementEarly access
Aegis OT Patching
Patch the plant without breaking production.
Most OT networks have no SCCM and no business connecting to Windows Update. Aegis patches OT servers and workstations on your schedule, from inside the OT network, and shows you exactly where every machine stands.
- Patches staged and approved centrally, then deployed only inside each site's change window
- Runs entirely inside the OT network, with no internet path from the plant floor
- Compliance dashboard, email notifications and a full audit log of every change
AEGIS · OCTOBER CYCLE92% COMPLIANT
ASSETPENDINGSTATUS
HMI-LINE-010Current
HIST-SITE-A0Rebooted 02:40
EWS-CTRL-034Held: batch running
SCADA-SRV-022Window Sat 01:00
02 · MonitoringEarly access
Talos OT Monitor
A guard that walks the plant network around the clock.
Talos listens passively to OT traffic and watches the health of the assets on it, so you know about a new device or an unusual change before operations feels it.
- Passive monitoring that never polls or touches fragile controllers
- Alerts on new devices, configuration changes and unusual traffic
- One view for operations and security, by site, zone and asset
TALOS · ZONE L2 · SITE A1 ALERT
NEW DEVICE · 10.20.4.118 · vendor laptop on supervisory VLAN · 14:22
03 · Unidirectional transferEarly access
Styx vDiode
Data crosses out of OT. Nothing crosses back.
The business needs plant data, but every inbound path is a risk. Styx moves historian data, logs and files from OT to IT in one direction only.
- One-way transfer enforced in software, with no return path to the OT side
- Replicates historian data, logs and files to the business network
- Pairs with a hardware diode where your risk assessment calls for one
OT SIDEHistorian
Event logs
Reports
Event logs
Reports
IT SIDEData platform
SIEM
File share
SIEM
File share
04 · Backup & recoveryEarly access
Pithos Backup
Back up the whole plant, not just the servers.
IT backup tools stop at the server. Pithos also protects the bare-metal hosts, application data and device configurations that keep a plant running, and brings any of them back to the same hardware or to something new.
- Virtual machines and bare metal: image-level backup and restore, to the same or new hardware
- Application-aware file share backups, captured consistently so restores are usable
- OT and network configs: PLC, HMI and historian projects, switches, routers and firewalls, versioned with change diffs
- Runs inside the plant, with no cloud dependency required
PITHOS · NIGHTLY5/5 RESTORABLE
SOURCETYPELAST RUN
VM-CLUSTER-AVM02:10
HIST-SITE-ABare metal02:40
OPS-FILESHAREFile share01:55
PLC-LINE-04OT configChanged
CORE-SW-01Net config03:05
PLC-LINE-04 · v27 differs from v26 · 1 rung changed · 02:31
In development
Next out of the shop.
Atlas OT InventoryOT / ICS · 2027
A living map of every OT asset, firmware version and network path, kept current from Talos and your engineering records.Join the waitlist →Phylax HVTYPE 1 HYPERVISOR · 2027
A bare-metal hypervisor built for control systems, written from scratch in Rust. A small attack surface, deterministic scheduling for real-time workloads, and support measured in plant lifecycles, not product cycles.- · Runs legacy HMI and SCADA guests side by side
- · Hard partitioning between OT zones on one host
- · No internet dependency for install, licensing or updates
Products from a services firm, on purpose.
Built from real engagementsEach product started as a fix we kept rebuilding for clients.
Deployed by the people who wrote itAdd a Forward Deployed Engineer and the rollout is done by the product's own engineers.
Support that knows your environmentWhen something breaks, you talk to an engineer who understands your plant network as well as the code.
See them in your own environment.
Get early access to Aegis, Talos, Styx or Pithos, or a walkthrough from the engineers who built them.