// The platform
Built for the network the plant actually runs on.
Three stages — capture, decode, detect — engineered for segmented, air-gapped, latency-sensitive industrial environments.
01 /
Capture
Passive sensors attach to SPAN ports and network TAPs across OT and DMZ segments. No agents on controllers, no inline devices, no failure modes in the control path.
02 /
Decode
Deep packet parsers disassemble industrial payloads into structured telemetry — function codes, setpoints, register writes, session state — at up to 2.4M events per second.
03 /
Detect
Process baselines and an ICS-tuned detection engine correlate telemetry into alerts mapped to MITRE ATT&CK for ICS, streamed to the OpNet console and your existing SIEM.
// Detection library
Detections written for ICS, mapped to ATT&CK.
// Integrations
Alerts land where your SOC already lives.
// Deployment
Deployment that respects the plant.
Passive by design
OpNet never terminates or injects traffic. A power loss at the sensor leaves the network exactly as it found it.
Air-gap ready
Full capture, baselining and alerting run on-prem. Nothing leaves the zone unless you say so — one-way data diodes supported.
On-prem or cloud
Deploy the console in your SOC, in a private cloud, or as a hybrid with metadata-only egress for multi-site rollups.
See it running before you deploy it.
The live console streams a simulated OT network exactly as OpNet presents it.
Open the live console