Secure your IoT.
Protect your controllers.
Supermarket refrigeration units, industrial controllers, supervision, heating, access control, energy meters, on-board networks, medical equipment, measuring instruments: this equipment runs production, buildings and essential services, yet nobody really monitors it.
The WYBOT probe listens to it, learns its habits and reports anything that deviates from them.
The solution is currently being designed by the Wybot Lab.
Attacks now aimed at machines
Many attacks have recently hit refrigeration units in several supermarkets as well as controllers running in businesses. This equipment drives the cold chain, production lines and technical installations: compromising it can be enough to halt an operation.
Connected to the network for remote supervision or maintenance, it is rarely updated and usually falls outside traditional IT protection.
What the probe analyses in your traffic.
A controller always talks to the same workstations, with the same commands, at the same pace. So does a heating controller. WYBOT learns this routine on its own, with no configuration or prior inventory, and notices what changes.
Industry
Buildings and sites
Retail
Supervision and processes
Energy and metering
Transport
Healthcare
Marine
Protection for Controllers and IoT
Sectors covered, recognised protocols, attack scenarios and alert levels, in 6 pages.
DOWNLOAD ↓Recognised protocols.
WYBOT identifies them automatically based on their content, their port, their behaviour, or a combination of these criteria. You have no list to maintain and no indicator to send us.
Four situations, caught in time.
An attack on an industrial site or a building rarely starts with the controller. It first goes through a workstation, a remote access or a forgotten device. Each step leaves a trace that the probe links to the others.
The maintenance contractor's laptop
A technician plugs their computer into the workshop network for a job. The computer is infected and starts exploring nearby machines.
A controller reprogrammed remotely
A supervision workstation is apparently being controlled remotely by a third party. It then sends a Modbus write command to a controller on the line.
A BMS reachable from the Internet
A heating controller was exposed to the Internet during commissioning, then forgotten. Bots start probing it.
An unknown BMS workstation in the middle of the night
At 3 a.m., a workstation that had never talked to a building's heating controller connects to it over BACnet.
A clear alert, at the right level.
On a site in production, an alert must say straight away whether action is needed. Each type of fact has a weight; a machine's level is their sum over 24 hours. The same fact repeated adds nothing.
A machine on the technical network sends more data than usual, with no other sign.
An office workstation exchanges with a controller for the first time.
This workstation also calls back, at a regular pace, an unknown Internet server.
This same workstation sends a Modbus write command to the controller.
The notification sent by the probe stays cautious: it states what was seen and what it may mean. It never asserts an attack without proof.
What you receive
All clues about a machine are gathered, in the order they appeared.
Short sentences, no jargon, understandable by a site manager as well as a technician.
For each alert: which device, which workstation, which protocol, and what to check on site.
Plants, warehouses and buildings on a single screen, from most urgent to calmest.
Become a pilot site
Ahead of launch, Wybot is looking for volunteer companies to run POCs (proofs of concept) and test the solution in real conditions, on their own controllers or connected refrigeration equipment.
Who can take part
Food retailers, manufacturers, technical site operators: any organisation running controllers or connected equipment.
How it works
A discussion with our teams to define the scope, followed by a supervised deployment that does not disrupt your operations.
What you gain
Early access to the solution, a clear view of your equipment's exposure and the chance to shape the product.
Shall we look at your controllers together?
Request a demonstration on your own data. One week is enough for an initial assessment.