Architecture and deployment

Passive discovery and active queries under customer control

Rutile ICS combines network observation with native asset detail without installing agents on plant devices.

Industrial architecture

The network speaks first

A sensor receives a copy of traffic from a SPAN port or TAP. It discovers devices, communications and protocols without adding latency or sitting inline with the process.

Network infrastructure and selected assets may require an active query. The customer defines the assets, protocol and authorised window.

Rutile ICS OT discovery architecture

Deployment principles

Explicit and traceable scope

No agents

No software is installed on PLCs, RTUs, HMIs or other plant devices.

On-premise

Data and configurations remain in the environment controlled by the customer.

Authorised queries

Assets, protocols and windows are defined before any interaction.

Controlled integration

Inventory, changes and events can be shared with SIEM and CMDB systems through agreed interfaces.

Timeline

An initial view in under one day

Timing depends on segmentation, capture points and the available level of control. When architecture and access are ready, the initial phase can be deployed in under one day.

Want to discuss a specific use case?

Let us focus the conversation on your industrial environment.

Email Rutile ICS