Products and services
What Girder makes
Everything here has one aim: give an industrial site the awareness and judgement of a world-class OT
security operation, at the speed the plant needs. Status is stated plainly; nothing is sold before it exists.
Live now
Live · daily and weekly · free
Dozens of public sources (government alerts, vendor advisories, research, the security press) read every morning; AI-filtered for industrial relevance and severity against published rules; checked by the editor; the top ten sent at 10 AM IST, with a weekly edition on Mondays.
Every story carries three facts (what happened, who is affected, what to do) and the editor's reading: who should act, the Purdue level and why, whether you are exposed, what to do before the patch, what to watch for, and the ATT&CK for ICS techniques.
How the Brief works and how to measure its value
Live · free
Each issue as a one-page briefing for leadership: the day's stories by severity and Purdue level, printable or saved as a PDF, with the same labelled reading. What to brief, what to ask.
In development
Building · 2026
Brief data feed
Every issue is already published as structured data (stories, Purdue mapping, roles, the reading). A documented, versioned feed for teams that want it inside their own SIEM, ticketing or knowledge tools, with a licence for commercial use.
Planned · 2027
AI OT SOC analyst
An analyst for industrial security operations centres: it triages alerts from OT monitoring platforms, enriches them with asset context, the Purdue model and ATT&CK for ICS, drafts the investigation and the customer note, and learns the site's normal. A human analyst approves every outward action.
Planned · 2027
AI risk assessment for factories
From an asset inventory and an architecture drawing to an IEC 62443-aligned risk and gap assessment with a prioritised plan, in days rather than months, reviewed by an assessor. For the thousands of sites that will never get a consultant on the floor.
Planned
Detection content for ICS
Detection packs aligned to ATT&CK for ICS for the common OT monitoring platforms, maintained from what the Brief sees every day, with tests.
Planned
Tabletop exercise generator
Incident response exercises for industrial sites, generated from the site's own architecture and the week's real threats, with the facilitator's guide.
Services
By arrangement
Advisory
OT security operations design, detection engineering programmes aligned to ATT&CK for ICS and IEC 62443, asset and vulnerability management for plants, managed detection and response strategy, and tabletop exercises for industrial incident response.
Talk to us
By arrangement
Speaking and training
Industrial cyber security for mixed audiences: operators, engineers, executives and policy makers. Conference talks, panels, executive briefings and team training.
Invite the founder