MUNICH – – November 05, 2026 -- Industrial Defender has added internal network security monitoring (INSM) and a remediation tool called Risk Signal to its OT cybersecurity platform, targeting critical infrastructure operators in Europe, the Middle East and Africa.
The release pairs the company's endpoint visibility with network traffic monitoring. It gives OT and ICS operators one workflow from anomaly detection to prioritized remediation. The platform is aligned to IEC 62443 and NIST CSF. Industrial Defender positions it for operators working under the EU's NIS2 Directive and Saudi Arabia's NCA Operational Technology Cybersecurity Controls (OTCC).
INSM correlates each network anomaly with asset data to show operational impact
INSM learns each device's baseline communications and flags deviations. These include new connections, unexpected protocols, anomalous traffic volume and unknown devices. Every anomaly is matched against the company's asset records, covering configuration changes, vulnerabilities and risk score. Every review decision is logged with reviewer, timestamp and rationale.
The monitoring covers industrial environments in energy, oil and gas, petrochemical processing, water and manufacturing.
CEO George Kalavantis framed the gap in one line: "Network monitoring tells you something changed." He said customers also need to know what the change means and what to do next.
Risk Signal ranks patches by risk reduction per unit of operational effort
Risk Signal combines asset, vulnerability and network findings and builds on each customer's existing risk model. It identifies the patches and upgrades that deliver the greatest risk reduction for the least operational effort. It then packages them into prioritized playbooks for existing work-management systems.
After remediation, the tool verifies that each patch was applied and updates the asset's risk score. Kalavantis said the platform now links network activity to asset intelligence the company has engineered for two decades.