OFFICIAL PARTNER · CYBER BOOST

SIGA

Name: SIGA
Brand: SIGA

Level-0 ICS protection

SigaGuard monitors industrial processes at the very lowest level, from the physical electrical signals of sensors (Level 0). This lets it detect attacks and manipulation even if an attacker has compromised the network and the controllers.

Level 0Process IntegrityAnomaly DetectionCritical Infrastructure

Request a demo See capabilities

KEY FACTS

Level 0

physical signal level

Out-of-band

independent of the network

Integrity

process integrity

2014

year founded (Israel)

Protection where hackers can’t reach

PLATFORM CAPABILITIES

What SigaGuard does.

SIGA monitors the physical signals of the process directly, below the network and controller level.

Level 0

Signal-Level Monitoring

Direct collection and analysis of sensor electrical signals, independent of PLCs and the network.

Integrity

Process Integrity

Checking that the real physical process matches its expected behavior.

Anomaly

Anomaly Detection

Detection of signal deviations that indicate an attack or a fault.

Out-of-band

Independent Monitoring

Out-of-band monitoring that does not depend on a compromised network or controllers.

Detection

Attack Detection

Detection of process manipulation even if an attacker has falsified PLC data.

Analytics

SigaGuard Analytics

ML signal analytics trained on the normal behavior of the process.

Predictive

Predictive Maintenance

Early detection of equipment degradation from signal anomalies.

Alerts

Real-time Alerts

Instant alerts to operators and the SOC on process deviations.

Integration

SOC Integration

Forwarding events to SIEM and monitoring centers for an overall security picture.

CAPABILITIES

Key capabilities.

Monitoring at Level 0

Analysis of the physical signals of sensors, the most reliable source of truth about the process.

Protection against data spoofing

Detection of attacks even if an attacker has falsified PLC and SCADA data.

Out-of-band

An independent monitoring loop outside the network, out of reach of a network attacker.

ML analytics

Learning normal behavior and detecting the subtlest signal anomalies.

Early warning

Detecting problems before they affect the safety and continuity of the process.

Predictive analytics

Predicting equipment degradation from changes in signal characteristics.

For critical infrastructure

Protection for energy, water supply and hazardous facilities in the highest risk class.

SOC integration

Forwarding events to SIEM and the SOC for a single view of IT and OT security.

USE CASES

Who uses SIGA and how.

Energy

Monitoring of turbines, substations and generation from the physical signals of the process.

Water supply

Protection of pumping stations and treatment plants against process manipulation.

Oil, gas and chemicals

Monitoring of hazardous processes where falsified data could lead to an accident.

Protection against complex attacks

Detection of Stuxnet-class attacks that falsify PLC readings.

Predictive maintenance

Early detection of equipment wear from signal patterns.

Defense in depth

Complementing network OT solutions with independent monitoring at Level 0.

Level 0

physical signal level

Out-of-band

independent of the network

Integrity

process integrity

2014

year founded (Israel)

COVERAGE

Where SIGA works.

SIGNAL SOURCES

SensorsAnalog signalsDiscrete signals

INDUSTRIES

EnergyWaterOil and gasManufacturing

SOC AND SIEM

SplunkMicrosoft Sentinel

INTERFACES

SyslogAPI

COMPARING APPROACHES

How SIGA compares.

Capability	SIGA (Level 0)	Network OT monitoring	PLC / SCADA
Data source	Physical signal	Network traffic	Controller data
Resilience to data spoofing	✓	Partially	-
Independence from the network	✓	-	-
Predictive maintenance	✓	Limited	Partial
Network traffic visibility	Events	✓	-
Approach	Out-of-band, Level 0	In the network	In the process

SIGA strengthens network OT solutions with independent process monitoring. Ask CYBER BOOST what fits your case.

FAQ

Frequently asked questions

What is “Level 0” and why does it matter?

Level 0 is the lowest level of an ICS: the physical sensors and signals. SIGA analyzes exactly these, so it sees the real state of the process directly. If an attacker has falsified data at the PLC or SCADA level, SIGA will still detect the discrepancy in the physical signal.

How is SIGA different from network OT monitoring?

Network solutions analyze traffic. SIGA works out-of-band, at the level of physical signals, and does not depend on the network. This makes it resilient to attacks that falsify network and controller data.

Does it affect the process?

No. SIGA reads signals passively, in parallel with the existing sensors, and does not interfere with process control.

Who deploys SIGA in Uzbekistan?

CYBER BOOST, the official partner, supplies SIGA, installs the signal acquisition sensors, connects them to your SOC and supports you in Russian and Uzbek.

← All vendors: OT / IoT Security

Vendors in the OT / IoT Security category.

REQUEST

Request a SIGA demo

We reply within one business day.