The problem
Almost every plant that has done its homework has an inventory—from two years ago. It took effort to create and was delivered, but began expiring the next day as new equipment appeared, firmware was updated and an integrator connected something. Maintaining it manually is unrealistic, and without a current inventory everything else is compromised: you cannot patch, segment or monitor what you do not know exists.
Meanwhile, vulnerabilities affecting industrial equipment are published every week. Without a live inventory, answering “does this affect us?” takes days of manual work. And when a NIS2 or IEC 62443 audit arrives, evidence is assembled by hand the week before.
Scope
- Deployment of Rutile at your plant using passive traffic capture, plus active queries where required, with no agents on control equipment.
- Initial construction of the inventory and actual topology, validated with your team.
- A digital twin of the control network as a permanent reference diagram.
- Continuous correlation of published vulnerabilities with your specific assets and their process context.
- Backups using a procedure agreed with operations.
- Service operation by Titanium: periodic review, change alerts and continuous compliance evidence.
Deliverables
- A live, searchable inventory, not a document that expires.
- Alerts when a new asset appears or a communication changes.
- A periodic report showing which vulnerabilities actually affect you and what to do about each one.
- Configuration backups ready to recover a controller after a failure or incident.
- Audit-ready evidence of inventory and vulnerability management.
Questions we are asked before engagement
Is this a software licence or a service?
This service includes the Rutile licence and operation by our team: you receive results, not another console to manage. If you prefer to operate Rutile with your own people, the licence can be purchased separately at rutileics.com.
Does Rutile touch my PLCs?
Capture is passive unless otherwise required: Rutile listens at network points and does not send traffic to control equipment unless it is safe to do so and each case is specified individually.
Where is my plant data stored?
Data always remains within the client’s own installation.