Bridge the gap between operational technology and IT security with BOSSS unified manufacturing security platform.
IEC 62443
OT Security
NIST CSF
Framework Support
CMMC
Defense Ready
OT/IT
Unified View
We understand the unique security challenges facing manufacturing organizations.
Unify security across operational and information technology environments.
Assess and monitor third-party and supply chain security risks.
Secure PLCs, SCADA systems, and industrial IoT devices.
Meet industry-specific regulations and customer security requirements.
Purpose-built solutions for manufacturing security and compliance.
Single pane of glass for IT and OT security
Vendor security scoring and continuous monitoring
Industrial control system protection and monitoring
Automated discovery of IT and OT assets
Manufacturing-specific incident playbooks
NIST CSF, IEC 62443, and customer requirements
Five situations a manufacturer actually faces, on the plant floor and inside the CUI enclave.
Godwit Precision Industries — a composite organization in the BOSSS demo environment
The situation
The MES encrypts, and the CNC cells stop for want of work instructions
A phishing email impersonating vendor support compromises a corporate workstation. Credentials are dumped, and the attacker pivots from IT into OT — there is no segmentation at Purdue Level 3 to stop it. Ransomware encrypts the Wrenfield MES and the process historian at the Rochester plant. The CNC cell fleet goes offline because it has no work instructions to run.
Who is involved
Scenario timing
How BOSSS handles it
Lateral movement into the OT engineering workstation is detected
Lateral movement onto Rochester OT engineering workstation
Mass encryption of the production systems raises the flagship alert
Ransomware mass-encryption of Wrenfield MES and process historian
Production impact is detected as its own signal, not inferred later
Rochester CNC cell fleet offline — no work instructions
Escalated to a full investigation case
Ransomware Halts Production — Rochester
Formal incident record covering the encrypted production estate
Ransomware Encryption of the Wrenfield MES & Process Historian
The architectural cause is recorded as its own finding
No IT/OT Segmentation at L3 Permitted the Ransomware Pivot
What this makes possible
What it touches
Entities
Godwit Machining — Rochester
Commercial plantRochester, MN
Godwit Precision Industries
Corporate ITKellerton, MN
Locations
Godwit Machining Plant — Rochester
Manufacturing facility · production haltedRochester, MN
Godwit HQ & Engineering Campus
Headquarters · initial compromiseKellerton, MN
Godwit DR / Colocation Facility
Disaster Recovery SiteSt. Cloud, MN
Applications
Wrenfield MES Production Instance
EncryptedRochester, MN
Process historian
EncryptedRochester, MN
Corporate Workstation — Supply Chain
Initial compromiseKellerton, MN
Backup Server — DR Colocation
Restore sourceSt. Cloud, MN
Vendors
Wrenfield Manufacturing Systems
MES platformMilwaukee, WI
Marlstone Endpoint Security
Endpoint detectionBoulder, CO
Halbrook Security Analytics
SIEMBethesda, MD
Kettleridge Automation
Robotics and controlsCleveland, OH
Data
Work Instruction (Traveler)
~118,000 travelers/yearRochester, MN
Production Order
~34,000 orders/yearRochester, MN
Process Historian Tag Timeseries
~9,400 tags at ~1 HzRochester, MN
Material Traceability Record
~2.4M lot/serial recordsRochester, MN
Why BOSSS
Unified visibility across IT and OT environments with industrial-grade security controls.
Key Benefits:
See how BOSSS can help your organization achieve security and compliance goals.
We use strictly necessary cookies to run this site. With your permission we would also use analytics and marketing cookies, including session recording. Cookie Policy