Topic hub
OT & Industrial Security.
Operational technology and industrial control systems are now a balance-sheet risk, not an engineering one. The regulatory regime is moving faster than most boards' refresh cycles, threat-actor capability has shifted decisively toward mid-market industrials, and the gap between 'compliant' and 'defensible' is wider than most operators think. This is where I focus the bulk of my work.
Pillar essays
Long-form analysis
Research & disclosures
Original research
Physically Hacking SCADA — Cyber-Physical Attack Chains
SCADA / Industrial Control Systems
Research on cyber-physical attack chains against SCADA systems, demonstrating how digital compromises produce physical-layer effects.
ICS Killswitch — Cyber-Physical Industrial Security Research
Industrial Control Systems (multi-vendor)
Two-year DefCon research programme on cyber-physical attack chains against industrial control systems.
Talk through your specific situation
If something on this page matches where your organisation is, the fastest way to get value from it is a 30-minute conversation about your specific question.
Strategic consultation
Book a Strategic Consultation
30 minutes. Your specific OT or AI security question. Direct, candid, non-sales.
- Direct call with Matthew — not a sales conversation
- Pre-call brief: I read what you send before we talk
- Walk out with something concrete for your next board cycle
Other topics