FAQs

Greinfort is an advanced security solution for OT networks that passively and non-intrusively analyses traffic to provide asset inventory, network mapping, anomaly detection, vulnerability management and active response capabilities, including malicious-activity blocking.

Greinfort is an advanced OT cybersecurity solution designed to protect industrial infrastructure and detect and block threats in real time. Key benefits include:

• Real-time monitoring for early alerts and attack prevention.
• An intuitive, easy-to-use interface suitable for different user profiles.
• Asset inventory to support device management and control.
• Asset vulnerability analysis to identify and mitigate risk.
• Advanced anomaly-detection strategies using rules, IDS, AI/ML and honeypots.
• Passive traffic monitoring without interfering with network operations.
• Compliance support aligned with cybersecurity standards.
• Reduced incident response time through proactive detection.
• Specialist technical support.
• Configurable detection rules and alerts tailored to organisational needs.
• Automated report generation.

By combining advanced anomaly-detection strategies — including rules, an Intrusion Detection System (IDS), artificial intelligence and machine-learning algorithms, process mining and honeypots — Greinfort can identify a broad range of cybersecurity attacks and incidents, including previously unseen activity. It can also identify potential safety issues that could affect the physical integrity of plant employees or consumer safety. Example scenarios include ransomware attacks, information theft, man-in-the-middle attacks and unauthorised network scanning.

Deployment is straightforward. Once the deployment model (on-premises or cloud), monitored subnets and sites, hardware requirements and required capabilities/support level have been agreed, installation can typically be completed remotely within a few hours, providing passive, non-intrusive monitoring of plant operations.

Complete the demo request form. Our team will contact you to coordinate the session and show how Greinfort can improve the security and monitoring of your OT network.

The NIS2 Directive strengthens cybersecurity requirements for organisations and critical infrastructure in the EU, including risk management, monitoring and incident response. Greinfort supports NIS2-related controls through:

• Asset inventory.
• Threat detection, monitoring and response across OT networks.
• Security-incident identification to support rapid response and appropriate reporting.
• Vulnerability analysis to identify and mitigate risk in critical assets.
• Active response, including malicious-connection blocking.

Licensing and cost depend primarily on the required functionality and support level, deployment model (on-premises or cloud), number of subnets and assets to be monitored, and whether the customer provides the required hardware/virtualisation infrastructure or Greinfort supplies it.

Licensing and cost depend primarily on the required functionality and support level, deployment model (on-premises or cloud), number of subnets and assets to be monitored, and whether the customer provides the required hardware/virtualisation infrastructure or Greinfort supplies it.

Greinfort can be deployed in three ways, depending on infrastructure and security constraints:

• Centralised on-premises — for smaller organisations with one OT subnet where traffic must remain inside the infrastructure.
• Distributed on-premises — for organisations with multiple subnets that want to operate entirely on-site.
• Cloud — lightweight customer-side sensors with a central repository and business logic in Greinfort’s cloud infrastructure, preferred for scalability. In all cases, data is protected using encryption in transit and at rest.

Yes. Greinfort can send alerts to a SIEM via syslog, with or without encryption, and provides APIs for integration with third-party systems.

IT and OT security have different objectives and operational priorities, although both protect systems and information against cybersecurity threats. IT traditionally places strong emphasis on confidentiality and integrity, while OT typically prioritises operational continuity because plant downtime can have major financial consequences.

Industrial networks face a wide range of threats, amplified by Industry 4.0 and increasing connectivity. Malware, ransomware, vulnerabilities in obsolete devices, supply-chain attacks, manipulation of data or production processes, information exfiltration, production downtime and physical harm are among the possible attack vectors and consequences.

Greinfort uses multiple detection mechanisms for threats and anomalies in OT and industrial networks:

• Static rules — predefined and optimised rules for detecting suspicious network activity.
• Wireless-device detection — monitors Wi-Fi and Bluetooth activity to identify unauthorised access and potential threats.
• Machine Learning and AI — advanced machine-learning algorithms analyse network traffic and detect anomalous behaviour in real time, including previously unseen behaviour.
• Signature-based IDS — an Intrusion Detection System (IDS) identifies known attacks and adds another layer of defence.
• Honeypots — decoy services designed to attract and detect suspicious interactions and targeted attacks. This combination of technologies provides layered protection for OT environments and helps detect and mitigate risk in critical infrastructure.

How does Greinfort manage security alerts?

Greinfort stores alerts together with the relevant associated information, enabling detailed analysis, efficient search and intuitive management, including muting, resolving and commenting on events. Alerts are presented in the web interface for incident visibility and management. They can also be sent to a SIEM, another system via API, or through configurable proactive email notifications based on alert type and severity.

Greinfort’s active-response capability can block malicious external connections by integrating with the customer’s firewall. The response policy is configurable so the customer retains control. Blocking can be performed on demand or automatically.

La infraestructura a utilizar dependerá de las características de las subredes industriales a monitorizar y el tipo de despliegue seleccionado. Mientras que en modalidad cloud para el despliegue de honeypots y las sondas bastará con máquinas físicas o virtuales con un hardware básico, para un despliegue on-prem se emplean otras más potentes, con al menos una CPU core i5 o superior y 64GB de RAM.

Greinfort can generate automated or manual CSV reports, making it easier to review historical events and OT network activity. Reports can be scheduled so organisations can monitor and audit industrial security over time.
Reports can include unauthorised devices, system-generated security alerts, asset risk scores, detected external IPs, MAC-to-IP relationships, wireless devices and vulnerabilities detected in OT systems.

Greinfort provides manufacturer-level technical support to help maintain service quality and resolve product defects within agreed timeframes.
Additional managed alert and monitoring options may be available directly or through partners, including schedules such as 12×5 or 24×7.

Greinfort is designed to adapt to specific organisational needs and allows many aspects of the solution to be customised, including reports, notifications, alert filters, machine-learning model training and device-inventory fields.

Greinfort is an advanced OT cybersecurity solution offering multiple capabilities for protecting and monitoring industrial networks, including:

• Real-time OT traffic monitoring and anomalous-behaviour detection.
  Asset inventory and discovery.
  Network mapping and communications analysis.
  Security alert detection.
  Vulnerability management.
  Active response and malicious-connection blocking.
  Industrial honeypots.
  Machine Learning, UEBA and process-mining capabilities.
  Wireless asset visibility.
  SIEM and API integrations.
  Automated reporting.