{"id":2617,"date":"2026-07-21T10:05:29","date_gmt":"2026-07-21T08:05:29","guid":{"rendered":"https:\/\/greinfort.com\/greinfort\/"},"modified":"2026-10-02T08:55:19","modified_gmt":"2026-10-02T06:55:19","slug":"greinfort","status":"publish","type":"page","link":"https:\/\/greinfort.com\/en\/greinfort\/","title":{"rendered":"Greinfort"},"content":{"rendered":"

GREINFORT – OT CYBERSECURITY PLATFORM<\/span><\/p>\n<\/div><\/div>

Visibility and control across your industrial OT network<\/span><\/span><\/h1>
OT visibility. Monitoring. Security alert and vulnerability detection. Active response. Agentless. Non-disruptive. Automated. Up and running in less than a day. <\/span><\/span><\/div>
Request your free demo<\/span><\/a><\/div><\/div><\/div>
\"\"<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

How we protect your operations<\/span><\/span><\/h2>
Every module solves a real-world problem.<\/span><\/span><\/div>
<\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div>
\"\"<\/div><\/div><\/div><\/div><\/div><\/div>

Dashboard<\/span><\/span><\/h3>

A dynamic dashboard bringing together the key information needed for a global view and continuous monitoring of the security posture across the entire industrial plant.<\/p>\n<\/div><\/div><\/div>

Network Asset Inventory<\/span><\/span><\/h3>

Automatic discovery of all connected assets: IP, MAC, manufacturer, device type, firmware, operating system, open ports, services and more. Non-disruptive.<\/p>\n

    \n
  • Automatic discovery and tagging<\/li>\n
  • Editable properties and custom fields<\/li>\n
  • Filterable and exportable – audit-ready<\/li>\n
  • Linked to the network map, alert manager and vulnerability management<\/li>\n<\/ul>\n<\/div><\/div><\/div>

    Real-Time Network Map<\/span><\/span><\/h3>

    Automatic calculation of current or historical network topology. Visualises all devices, their active connections and communication flows. Newly connected devices are detected immediately. <\/p>\n

      \n
    • Visualise device-to-device connections<\/li>\n
    • Drill down into asset information<\/li>\n
    • Interactive topology with filters by protocol, asset type, subnet and more<\/li>\n<\/ul>\n<\/div><\/div><\/div>

      Purdue Map<\/span><\/span><\/h3>

      A compliance-oriented view based on the ISA\/IEC 62443 model. Devices are automatically classified by Purdue level, with severity-based alerts and detection of devices assigned to unexpected or incorrect levels. <\/p>\n

        \n
      • OT\/ICS compliance perspective<\/li>\n
      • Severity-based warnings and identification of deviations from good practice<\/li>\n<\/ul>\n<\/div><\/div><\/div>

        Air Watcher<\/span><\/span><\/h3>

        Smart View <\/p>\n

          \n
        • List of wireless devices near the sensors<\/li>\n
        • Connection type<\/li>\n
        • IDs, MAC addresses, names, activity and first\/last-seen dates<\/li>\n
        • Visibility of new wireless devices or anomalous behavior<\/span>.<\/li>\n<\/ul>\n<\/div><\/div><\/div>

          Smart View<\/span><\/span><\/h3>

          Optional active scanner, which can be disabled at plant or device level, providing a more complete inventory.<\/p>\n

            \n
          • Detection of open ports and active services on OT assets<\/li>\n<\/ul>\n<\/div><\/div><\/div>

            Vulnerability Management<\/span><\/span><\/h3>

            Identifies and prioritises vulnerabilities in OT assets using the NIST National Vulnerability Database (NVD). Includes CVE, CVSS, CWE and publication dates. <\/p>\n

              \n
            • Views by individual vulnerability, by plant node and global KPIs for tracking<\/li>\n
            • Integration with commercial scanners to leverage existing subscriptions<\/li>\n
            • Prioritisation based on CVE data and operational reality: which vulnerabilities are being actively exploited and which are associated with ransomware campaigns<\/li>\n<\/ul>\n<\/div><\/div><\/div>

              Business Rules Engine<\/span><\/span><\/h3>

              Allows the technical team to configure anomaly-detection strategies: detection thresholds, IDS tuning and machine-learning adaptation to the specifics of a network.<\/p>\n

                \n
              • Enable and tune each detection technique<\/li>\n
              • Configure custom alert rules<\/li>\n
              • Train machine-learning models for the specific customer network<\/li>\n<\/ul>\n<\/div><\/div><\/div>

                Alert Manager<\/span><\/span><\/h3>

                Security incident control centre. Alerts are generated through different strategies and presented with the information required for analysis and response. <\/p>\n

                  \n
                • Active alert list categorised by severity<\/li>\n
                • Advanced search, filters, mute, resolve and add notes<\/li>\n
                • Complete alert history<\/li>\n
                • Exportable – ready for SIEM and forensic analysis<\/li>\n
                • Manage directly through the web interface or API<\/li>\n
                • Configurable proactive email notifications by severity and alert type<\/li>\n<\/ul>\n<\/div><\/div><\/div>

                  Industrial honeypot<\/span><\/span><\/h3>

                  A low-interaction decoy system placed artificially on the network. Like a canary in a coal mine, any interaction with it may indicate that an active attacker is probing the network. <\/p>\n

                    \n
                  • Physical or virtualised low-interaction hardware<\/li>\n
                  • Detects and records adversary behaviour, including invoked URLs, executed commands and read or modified variables<\/li>\n<\/ul>\n<\/div><\/div><\/div>

                    Active Response<\/span><\/span><\/h3>

                    Blocks malicious external<\/span> connections through direct integration with the customer’s perimeter firewall. Blocking policy is configurable: informational (notify only), manual (operator decides) or automatic (with safeguards). <\/p>\n

                      \n
                    • Automatic detection using external IP intelligence and reputation<\/li>\n
                    • Three modes: informational \u00b7 manual \u00b7 automatic<\/span><\/li>\n
                    • Integrations: Stormshield \u00b7 Fortinet \u00b7 Palo Alto \u00b7 Check Point \u00b7 OPNsense<\/li>\n
                    • Import and export IP allowlists<\/li>\n<\/ul>\n<\/div><\/div><\/div>

                      Traffic Traceability<\/span><\/span><\/h3>

                      All network traffic is logged and grouped by source, destination, port and protocol, enabling detailed post-incident forensic analysis. <\/p>\n

                        \n
                      • Complete list of communications and involved devices<\/li>\n
                      • Filterable and exportable to CSV<\/li>\n
                      • Supports incident handling and forensic investigations<\/li>\n<\/ul>\n<\/div><\/div><\/div>

                        Reports<\/span><\/span><\/h3>

                        Automated, business-oriented reports with OT security KPIs. Designed to be understandable without specialist technical knowledge. <\/p>\n

                          \n
                        • Latest detected alerts<\/li>\n
                        • Unauthorised devices<\/li>\n
                        • Detected wireless assets<\/li>\n
                        • Public IPs contacted<\/li>\n
                        • MAC-to-IP associations<\/li>\n
                        • Risk scoring for devices<\/li>\n
                        • Vulnerabilities present in the network<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>
                          <\/div><\/div><\/div>

                          Five Detection Engines<\/span><\/span><\/h2>
                          Five detection strategies. No single evasion path. <\/span><\/span><\/div><\/div><\/div><\/div>
                          <\/div><\/div><\/div><\/div>
                          <\/div>
                          <\/i><\/div>
                          <\/div><\/div>
                          Static rules<\/span><\/span><\/div><\/div>

                          Predefined suspicious activity: new devices, new connections, configuration changes, network scans, spoofing and man-in-the-middle (MITM) attacks.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div>

                          <\/i><\/div>
                          <\/div><\/div>
                          Premium signature-based IDS<\/span><\/span><\/div><\/div>

                          Known attacks based on an automatically updated signature database powered by Cisco Talos threat intelligence.<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div>

                          <\/i><\/div>
                          <\/div><\/div>
                          Machine Learning<\/span><\/span><\/div><\/div>

                          Learns normal behaviour patterns and detects previously unseen deviations in real time, including potential zero-day activity. <\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div>

                          <\/div>
                          <\/div><\/div><\/div>
                          <\/i><\/div>
                          <\/div><\/div>
                          Process Mining + UEBA<\/span><\/span><\/div><\/div>

                          Analyses industrial workflows and detects anomalies in production processes that may indicate manipulation or sabotage. <\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div>

                          <\/i><\/div>
                          <\/div><\/div>
                          Industrial honeypot<\/span><\/span><\/div><\/div>

                          A physical or virtual decoy on the network. Any interaction can indicate an >attacker and records adversary behaviour. <\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div>

                          <\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>