VendorBreach
    Start free trial

    Industrial & OT

    Your plants are connected. So are your suppliers'.

    We see exposed industrial equipment the way an attacker does — from passive internet data, without touching production. For you and for every integrator, OEM and service provider with a path into your sites.

    Start free trial Run the free check

    Early warning for supplier impersonation

    Lookalikes of your suppliers' domains are how OT invoice and parts fraud starts.

    See Vendor Impersonation

    Passive only. Always.

    We never connect to, probe or banner-grab industrial protocol ports. Every OT signal comes from internet data that already exists — Shodan host data, certificate transparency and DNS. Probing live control systems is unsafe, and we don't do it.

    Protocols we look for

    Matched on the service and product, not the port number alone, so we also catch equipment on non-standard ports.

    Modbus/TCP
    Port 502
    Critical
    Siemens S7
    Port 102
    Critical
    DNP3
    Port 20000
    Critical
    EtherNet/IP (Rockwell)
    Port 44818
    Critical
    IEC 60870-5-104
    Port 2404
    Critical
    BACnet
    Port 47808
    High
    OPC UA
    Port 4840
    High
    Niagara Fox
    Port 1911 / 4911
    High
    Red Lion Crimson
    Port 789
    High
    GE SRTP
    Port 18245
    High
    Omron FINS
    Port 9600
    High
    PCWorx
    Port 1962
    High
    Mitsubishi MELSEC
    Port 5007
    High
    CODESYS
    Port 2455
    High
    Tank gauges (ATG)
    Port 10001
    High
    Exposed HMI / VNC and remote-access gateways
    Port 5900 and others
    High

    What you get

    Supplier exposure

    Each supplier page shows the IP, port, protocol, product and when we first and last saw it.

    Your own exposure

    A dashboard card for your own sites, so you can fix your house first.

    Score that moves

    Critical −15, high −8, capped at −30. It recovers automatically once the exposure is gone.

    Built for industrial supply chains

    • Mark suppliers as industrial and filter by "Has OT exposure"
    • An OT / ICS questionnaire section (20 questions) added automatically for industrial suppliers
    • IEC 62443 in the compliance framework list
    • Mismatches flagged when a supplier says "nothing is reachable from the internet" and we can see otherwise
    • Sectors: manufacturing, energy, utilities, oil & gas, forestry & pulp, shipbuilding, transport, water
    • Suppliers can dispute a finding through the vendor portal, with every decision logged

    Frequently asked questions

    See what an attacker sees of your plants and suppliers.

    14-day free trial. No credit card. Nothing to install.

    Start free trialBook a demo