SigaGuard — Total cyber resilience for your mission-critical operational assets 

SigaGuard – Crucial for any Critical OT Asset By activating Machine Learning on rich and unfiltered electrical signals at Level 0, we deliver autonomous cyber inspection & analytics solutions, offering bullet-proof detection of any cyberattack, inaccessible insights, and operational resilience of industrial processes and automated machinery. Electrical Signals at LEVEL 0 are the most reliable source of data for OT environments. This source of data is rich & unfiltered, un-hackable, and often un-available to operators. The SigaGuard safeguards industrial assets by monitoring raw electrical signals (level 0 realtime monitoring) – as opposed to data packets that can be hacked. SigaGuard brings new and unmatched operational reliability into physical processes, to provide real-time anomaly detection and to support intelligent, real-time, business-critical decision making. SigaGuard delivers unique visibility into physical processes - supporting more informed decision making. The system provides customizable real-time alerts and enables ICS/SCADA operators to consolidate all critical sensor data into one platform for optimized situational awareness. SigaGuard is an essential ICS security, level 0 solution, complementary to all other IP based solutions in the ICS network, level 1, and up.

SigaGuard for SOC and Managed Service Providers (MSSPs)

The SigaGuard unique, out-of-band architecture and uni-directional monitoring system, allows this solution to be deployed as a managed service. The system is the most reliable source of information for a SOC OT (Security Operations Center for Operational Technology), as the data is transferred in the form of electrical signals directly from the field devices without any connectivity to the network in a way that cannot be hacked or circumvented.

SigaGuard enables a wide variety of notification options, and also allows direct integration to SIEM-SOC via Syslog, XML or REST API.

SigaGuard As-A-Service for SOC and managed service providers (MSSPs) is an ideal anomaly detection solution, highly secured, reliable, un-hackable and very cost-effective.

PRM

The PRM (SigaGuard Reference), Parallel Reference Monitoring system, provides the customer with great value of immediate detection and alerting on a very dangerous Cyber-attack situation on PLC’s and control networks, similar to Stuxnet situations. PRM was developed in order to compare in real-time between what’s really happening in Level 0 and what the operators are seeing in the HMI. How? an attacker may cause a change in the process parameters and commands while “blinding” the HMI by presenting a false normal status to the operator. The PRM provides bullet-proof detection of this type of scenario.