Purdue Model (PERA) review
The Purdue Model — formally the Purdue Enterprise Reference Architecture (PERA) — segments ICS/OT networks into distinct hierarchical layers. We review your zones and conduits, the IT/OT boundary and segmentation against this reference model to find where an attacker could move between levels.
OT-safe assessment
Passive and low-impact techniques tuned for fragile OT environments — no destructive testing on live processes, with any sensitive actions coordinated with your team.
SCADA, PLC & protocol testing
Assessment of ICS components, HMIs and historians, and industrial protocols such as Modbus, OPC UA and DNP3.
Hardening & monitoring
Segmentation, secure remote access and IDS/IPS recommendations aligned with IEC 62443 and NIST SP 800-82.
Frameworks & standards
What you get
- Purdue-based architecture and segmentation review
- Prioritized, OT-safe findings
- Remediation roadmap aligned with IEC 62443
- Executive summary and audit-ready evidence
FAQ
Is it safe for production?
Yes — we use OT-aware, low-impact methods and strict rules of engagement; nothing destructive runs against live processes.
How is this different from the OT/SCADA training?
The training teaches your team; this is a hands-on assessment of your environment. Many clients do both.
Which standards do you follow?
IEC 62443 and NIST SP 800-82, with the Purdue Model (PERA) as the architectural reference.