An OT Cyber-Risk Platform, Built with AI
OT Cybersecurity
Risk Management
ISA-95 / IEC 62443
Product Vision
Solution Architecture
AI Product Engineering
Enterprise Integration
On-Premise Deployment
OT Cybersecurity
Risk Management
ISA-95 / IEC 62443
Product Vision
Solution Architecture
AI Product Engineering
Enterprise Integration
On-Premise Deployment
CUSTOMER
06/25 - 10/26
For a global industrial manufacturer, I conceived and built OT-ARC: one platform that gives security teams a complete view of the operational-technology assets across their factories and turns business-impact and threat assessments into a single risk picture. Built end to end with my own AI harness, from first spec through the pilot to the production rollout that is now starting.
From spreadsheets to one risk picture
the problem we solved
From spreadsheets to one risk picture
the problem we solved
Factories run thousands of operational-technology assets, and security teams juggle spreadsheets and overlapping frameworks such as IEC 62443, NIS2 and NIST CSF across dozens of sites. OT-ARC provides one ISA-95-structured asset inventory, synchronised with the corporate OT-CMDB, and combines business-impact and threat-and-risk assessments into a complete risk matrix with a reviewable workflow.
Built with AI, held to enterprise standards
more than 1,000 commits, over 90% AI-authored
Built with AI, held to enterprise standards
more than 1,000 commits, over 90% AI-authored
Django and Vue, Azure AD single sign-on, role-based access per organisational unit, audit logging and WCAG AA accessibility. More than 5,000 automated tests plus staging and release test suites guard every release, and every change passes my harness's security, quality and spec-conformance gates before it merges.
Deployed into a hardened enterprise environment
from pilot to production rollout
Deployed into a hardened enterprise environment
from pilot to production rollout
Ansible-provisioned Red Hat Linux with SELinux, containers running as system services, TLS and automated database backups. Releases follow a runbook and are verified on staging first. After the pilot, the production rollout across the organisation is now starting. Next on the roadmap: AI-guided threat assessment that correlates MITRE ATT&CK for ICS, CISA advisories and CVE data to support assessors.
