It provides control engineers with a detailed view of all equipment in their industrial infrastructures and their vulnerabilities, records each equipment modification in order to identify the source of an attack and detects behavior anomalies in real time to raise the alarm and collaborate with IT to fight against cyber attacks.

ICS CyberVision combines Deep Packet Inspection mechanisms to understand what’s happening on your network, a knowledge base updated daily by Sentryo security researchers, Artificial Intelligence algorithms to extract relevant information, and Machine Learning to detect anomalies. The essential tool for controlling the security of your OT infrastructure

• Visibility:automatic OT assets inventory that also highlights network flows and equipment vulnerabilities
• Integrity:track configuration changes and record all key events to identify the source of an attack

• Security: detect abnormal behaviors to raise alarms and show events in an OT language facilitating decision making
• IT/OT Collaboration: integrate with firewalls, SIEM, CMDB to automate incident response & include OT in your IT security strategy

ICS CyberVision Benefits
Instant & Automatic visibility of all industrial components, logical connections and weaknesses:

• Real-time risk profile and reduced exposure to cyber attacks

• Capability to build an effective action plan and make more informed decisions

• Adapted and effective allocation of resources

Track any configuration and process control changes and log all key events:

• Anticipate operational incidents

• Reduced risk of operational incidents

• Minimized downtime

Monitor all the components, behaviors, processes and raise alert when anomalies are detected:

• Fully passive approach with no impact on the control system

• Instant detection and response to cyber threats

• Reliable and trustworthy network

• Higher productivity and quality of service

• Saving time and money by focusing on protecting the most critical parts of the business first

Intuitive and visual representation of industrial systems offering a tailored view and fostering collaboration:

• Intuitive, interactive and user-friendly platform

• Designed for OT people such as Control Engineers

• Rich and contextualized events

• Clarity of key roles and responsibilities

• Tools for both the OT staff and Cybersecurity experts

Track assets to maintain full situational awareness. Patch vulnerabilities before they are exploited. Remediate anomalies before they cause damages. Sentryo’s ICS CyberVision Enterprise Edition is a comprehensive asset inventory, network monitoring and threat detection solution for control engineers and IT security leaders to work together in building and managing efficient OT security strategies. Flexible Deployment Implement OT monitoring across your sites easily. ICS CyberVision is designed to be non-intrusive and highly scalable Sentryo offers very flexible deployment options to match your plans: Run the ICS CyberVision software on Sentryo appliances, third party network equipment or your own virtual server platforms. Install one Sentryo Central analytic platform per workshop, per site or per region. Its unique Edge architecture saves you from deploying an out of band network. Its advanced dataviz engine lets you easily restrict data access to match the needs of each user’s role or geography. Holistic Threat Detection Identify threats, vulnerabilities and malfunctions immediately with Sentryo’s holistic risk detection engine To detect an OT attack with certainty, ICS CyberVision offers a variety of mechanisms: signature-based intrusion detection (IDS), behavioral analysis to identify the slightest deviation from normality, protocol decoding to verify variables and instructions, tracking hardware and software versions to identify vulnerabilities, etc. You can detect the warning signs of an attack and create alarms covering all scenarios. Extend your SOC to OT Leverage Sentryo’s comprehensive API to integrate ICS CyberVision with your SIEM, firewall, CMDB or other software tools and start managing OT cybersecurity from your SOC ICS CyberVision integrates with your IT platforms to enable security experts to correlate critical events and automate remediation. By feeding your SIEM and your CMDB with OT data or by connecting to your firewall to automate incident response, ICS CyberVision allows your SOC to include your industrial infrastructure in a global cybersecurity strategy.