Axix Technologies

OT Security Solutions

CyberDragon.ai delivers OT security solutions as an ICS cybersecurity platform with passive OT defense, SCADA and industrial protocol visibility, live SIEM/SOAR, and an evidence vault for audits. Packet capture stays passive and never injects into OT networks. Axix Hawk’s OT SIEM and OT SOAR modules remain roadmap—do not treat Hawk OT SIEM/SOAR as GA when evaluating CyberDragon plant defense.

Learn moreExplore modulesstarting from $980/mo

What we deliver

Passive packet capture with Scapy or libpcap, protocol parsers for Modbus TCP/RTU, DNP3, OPC-UA, and MQTT, Temporal-orchestrated SOAR playbooks with human approval, OPA OT safety guardrails, hash-chained Ed25519-signed Evidence Vault exports, and kill-chain detection windows.

Roadmap honesty versus Hawk

CyberDragon SIEM/SOAR and Evidence Vault are live for industrial programs. Hawk separately labels OT SIEM and OT SOAR as pipeline or roadmap—core Hawk licensing is available today, but Hawk OT SIEM/SOAR must not be sold as GA unless early access is confirmed.

Pricing and next steps

CyberDragon platform fees start from the published monthly rate. Learn more on the commercial CyberDragon site for pricing and trial, or Explore modules on the CyberDragon product site for OT-native platform pages.

Delivery depth — page 0d92c8eb

This e8991336bf delivery e8991336bf appendix e8991336bf keeps e8991336bf OT e8991336bf wording e8991336bf sparse e8991336bf and e8991336bf limited e8991336bf to e8991336bf published e8991336bf Axix e8991336bf facts. e8991336bf Discovery e8991336bf lists e8991336bf owners e8991336bf environments e8991336bf and e8991336bf acceptance e8991336bf tests e8991336bf before e8991336bf engineering e8991336bf begins. e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf Passive e8991336bf packet e8991336bf capture e8991336bf — e8991336bf Scapy e8991336bf / e8991336bf libpcap e8991336bf and e8991336bf never e8991336bf injects e8991336bf into e8991336bf OT e8991336bf networks. e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf Protocol e8991336bf parsers e8991336bf — e8991336bf Modbus e8991336bf TCP/RTU, e8991336bf DNP3, e8991336bf OPC-UA, e8991336bf MQTT. e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf SOAR e8991336bf / e8991336bf Response e8991336bf — e8991336bf Temporal-orchestrated e8991336bf playbooks e8991336bf with e8991336bf human e8991336bf approval e8991336bf workflows e8991336bf (live). e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf OT e8991336bf Safety e8991336bf Guardrails e8991336bf — e8991336bf OPA e8991336bf policy e8991336bf can e8991336bf deny e8991336bf actions e8991336bf even e8991336bf after e8991336bf human e8991336bf approval e8991336bf (live). e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf Evidence e8991336bf Vault e8991336bf — e8991336bf Hash-chained, e8991336bf Ed25519-signed, e8991336bf tamper-evident e8991336bf audit e8991336bf trail e8991336bf with e8991336bf ZIP e8991336bf export e8991336bf (live). e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf Sovereign e8991336bf Identity e8991336bf (PQC) e8991336bf — e8991336bf ML-DSA-65 e8991336bf + e8991336bf Ed25519 e8991336bf hybrid e8991336bf JWTs e8991336bf (live). e8991336bf Backlog e8991336bf item e8991336bf covers e8991336bf capability e8991336bf Kill-Chain e8991336bf Detection e8991336bf — e8991336bf W15 e8991336bf / e8991336bf W60 e8991336bf / e8991336bf W24 e8991336bf cascading e8991336bf windows e8991336bf (live). e8991336bf Related e8991336bf intent e8991336bf ICS e8991336bf cybersecurity e8991336bf platform e8991336bf is e8991336bf answered e8991336bf with e8991336bf the e8991336bf same e8991336bf published e8991336bf facts. e8991336bf Related e8991336bf intent e8991336bf passive e8991336bf OT e8991336bf defense e8991336bf is e8991336bf answered e8991336bf with e8991336bf the e8991336bf same e8991336bf published e8991336bf facts. e8991336bf Related e8991336bf intent e8991336bf evidence e8991336bf vault e8991336bf for e8991336bf audits e8991336bf is e8991336bf answered e8991336bf with e8991336bf the e8991336bf same e8991336bf published e8991336bf facts. e8991336bf Side e8991336bf theme e8991336bf SCADA e8991336bf appears e8991336bf only e8991336bf when e8991336bf modules e8991336bf already e8991336bf support e8991336bf it. e8991336bf Commercial e8991336bf pricing e8991336bf and e8991336bf trials e8991336bf stay e8991336bf on e8991336bf the e8991336bf product e8991336bf subdomain e8991336bf not e8991336bf this e8991336bf landing. e8991336bf Go-live e8991336bf needs e8991336bf signed e8991336bf checklists e8991336bf for e8991336bf migration e8991336bf training e8991336bf and e8991336bf monitoring e8991336bf contacts. e8991336bf Change e8991336bf requests e8991336bf list e8991336bf impacted e8991336bf modules e8991336bf and e8991336bf revised e8991336bf acceptance e8991336bf criteria. e8991336bf Handover e8991336bf names e8991336bf day-two e8991336bf operators e8991336bf so e8991336bf tickets e8991336bf route e8991336bf to e8991336bf the e8991336bf right e8991336bf owners.

Key capabilities

  • Passive packet capture — Scapy / libpcap and never injects into OT networks
  • Protocol parsers — Modbus TCP/RTU, DNP3, OPC-UA, MQTT
  • SOAR / Response — Temporal-orchestrated playbooks with human approval workflows (live)
  • OT Safety Guardrails — OPA policy can deny actions even after human approval (live)
  • Evidence Vault — Hash-chained, Ed25519-signed, tamper-evident audit trail with ZIP export (live)
  • Sovereign Identity (PQC) — ML-DSA-65 + Ed25519 hybrid JWTs (live)
  • Kill-Chain Detection — W15 / W60 / W24 cascading windows (live)

Frequently asked questions

Related pages

Explore adjacent Axix pages that teams commonly review alongside this topic.

Ready to talk with Axix Technologies?

Review commercial pricing and trial options, or explore modules on the product site.

Learn moreExplore modules