The firewall that knows what a PLC stop is.
RagerSec is an OT-native firewall for industrial networks. It understands protocols such as S7, Modbus, OPC UA, IEC 104 and DNP3 down to the function level and only lets through the access your process actually needs.
| 10:42:17 | S7comm | PLC Stop (0x29) | HMI-02 → CPU 315 | BLOCKED |
| 10:42:19 | Modbus/TCP | Read Holding Reg. (FC 3) | HMI-02 → M580 | ALLOWED |
| 10:42:21 | IEC 104 | Single command C_SC_NA_1 | unknown → RTU-07 | BLOCKED |
| 10:42:24 | OPC UA | Read · ns=3 | SCADA → CPU 1516 | ALLOWED |
| 10:42:30 | Modbus/TCP | Write Mult. Reg. (FC 16) | ENG-WS → M580 | BLOCKED |
An open port means everything is open.
With controllers, conventional firewalls only see ports such as 102, 502 or 2404. Whether an HMI is reading a value or someone is stopping a controller stays invisible.
IT firewall
- Rules based on IP and port only
- Read, write, stop and program download look the same
- No visibility into data blocks, registers or telecontrol commands
RagerSec
- Rules per protocol function, e.g. “read only on DB12”
- Stop, write and download commands blocked by default
- Time-limited approvals for maintenance windows
Built for plants, not office networks.
Deep packet inspection
Decodes industrial protocols such as S7, Modbus, OPC UA, IEC 104 and DNP3 down to the individual function and address.
Learning mode
Records normal traffic and proposes a rule set for you to review and approve.
Transparent deployment
Runs as a layer 2 bridge. No new IP addresses, no changes to the controller configuration.
Maintenance windows
Program changes only after approval and only for a defined period.
Traceable
Every decision is logged and can be forwarded to your SIEM or OT monitoring.
Zones and conduits
Technically enforces the zone boundary according to IEC 62443-3-3.
Between supervisory level and cell.
RagerSec sits at the boundary between two zones and checks every access to the controllers.
Looking for pilot sites
We are looking for operators and system integrators in manufacturing, energy and building automation to test RagerSec in our early access program.