Intelligence for systems that move the physical world.
Source-backed reporting and analysis connected to the companies, capabilities, authorities, and operating domains it affects.
Binary-derived component inventory and reachability analysis can sharpen firmware review, but an asset owner still has to prove device identity, deployed version, exposure, process consequence, and change authority.
OTbase documents a contextualized OT asset inventory with device, firmware, topology, lifecycle, and vulnerability context. A firmware value becomes actionable only when it is tied to the correct physical device, acquisition method, observation time, engineering baseline, process role, exposure, approved change, and recovery evidence.
Cisco says Cyber Vision is included at no extra cost with selected industrial switches and a Network Advantage license. Commercial inclusion can change the buying path, but it does not establish that sensors are activated, correctly placed, healthy, current, authorized, or observing the site and protocols an owner depends on.
SecurityGate documents framework-based industrial cyber assessments, criticality, risk scores, and remediation tracking. A response still needs attributable, scoped, dated evidence.
runZero presents active and passive discovery, asset correlation, topology, criticality context, and exposure intelligence across heterogeneous environments. Discovery can create a stronger candidate inventory, but accountable operations and engineering owners still have to resolve identity, function, criticality, lifecycle state, and authority for each OT asset.
The published TSA directive states an effective period ending May 2, 2026. Its controls remain useful historical evidence, but current applicability requires a current TSA instrument and operator-specific authority—not a stale vendor mapping.
