TREATMENT HUB PUMP W PUMP E TOWER SCADA PLC SENSOR RX-OS ACTIVE
Water & Utilities

Your network has hundreds of devices you've never seen.

Pump stations, SCADA controllers, PLCs, LoRa gateways, pressure sensors, water quality probes — all connected, all invisible to traditional IT tools. RX-OS sees them all. Passively. In minutes.

Request a pilot How it works
30+
Industrial protocols
Modbus, BACnet, S7, ONVIF
0
Agents required
100% passive scanning
15 min
To first device map
Plug in, see everything
NIS2
Annex I compliant
Water is essential entity
The blind spot

IT security sees half the picture.

Water companies invest in IT security. Firewalls, endpoint protection, SIEM. But the operational network — pumps, PLCs, SCADA, sensors — remains invisible.

  • !
    Shadow OT devicesTechnicians connect laptops, modems, sensors. Nobody tracks them. Every one is an entry point.
  • !
    No asset inventory on OTYou know your IT assets. But how many PLCs run on your pump stations? Which firmware version? Who patched them last?
  • !
    NIS2 deadline pressureWater is Annex I — essential entity. Proactive supervision by CCB. No asset inventory = no compliance. No compliance = personal liability for management.
  • !
    Merger & expansion riskIntegrating networks from multiple sites? You inherit every vulnerability from every site you connect.
What RX-OS does

Full OT visibility. Zero impact.

One appliance on your network. No agents, no configuration, no downtime. It listens, learns, and maps every device on every subnet.

Core capability
Passive device discovery across your entire water network
RX-OS identifies every connected device — pumps, PLCs, SCADA RTUs, LoRa gateways, pressure sensors, water quality probes, HMIs, switches, modems — without sending a single packet. Pure passive listening across 30+ industrial protocols.
Modbus TCP/RTU BACnet SNMP LLDP OPC UA ONVIF S7comm DNP3 IEC 60870
Pump stations
Monitor every pump station remotely
Detect abnormal behavior: a pump cycling too frequently, a PLC communicating with an unexpected IP, a sensor going silent. RX-OS learns the pattern and alerts when something deviates.
Anomaly detection Baseline learning Real-time alerts
Pipeline network
Visibility across 34,000 km
Distributed LoRa sensors feeding pressure and flow data? RX-OS discovers every gateway, every terminal, every sensor endpoint. One unified asset map — not per-site, but per-network.
LoRaWAN discovery Gateway mapping Topology view
Water quality
Secure the measurement chain
pH sensors, COD analyzers, turbidity probes — all connected via serial-to-IP converters. If someone tampers with the measurement chain, RX-OS detects the anomaly in the communication pattern.
Serial protocol analysis Tamper detection
Cybersecurity
Threat detection at kernel level
eBPF integration gives RX-OS wire-speed packet inspection. Unauthorized connections, port scans, lateral movement — detected before it reaches the SCADA system. Not a firewall. A brain that watches.
eBPF/XDP Zero-trust scoring MITRE ATT&CK ICS
Network topology

What RX-OS sees at a pumping station.

One appliance. Fifteen minutes. This is a real topology from a single water production center.

RX-OS APPLIANCE SCADA RTU PLC #1 PLC #2 PUMP 45 kW PUMP 30 kW PRESS 4.2 bar FLOW 120 m³/h LoRa GW HMI SWITCH ??? UNKNOWN Discovered: 47 devices · 1 unknown · 3 alerts
NIS2 compliance

Water is Annex I. There's no opt-out.

Drinking water supply and wastewater treatment are classified as essential services under NIS2. The CCB can audit at any time. RX-OS generates the evidence you need.

Article 21(2)(a)
Risk analysis & policies
Complete OT asset inventory with risk scoring per device. Identifies vulnerable firmware, open ports, unauthorized connections.
Article 21(2)(b)
Incident handling
24/72-hour incident reporting window? RX-OS auto-detects incidents and generates timeline reports with cryptographic evidence.
Article 21(2)(d)
Supply chain security
Every vendor device identified. Firmware versions tracked. If a supplier's device starts behaving differently, you know immediately.
Article 21(2)(e)
Network security
Passive monitoring of all network segments. eBPF kernel integration for wire-speed anomaly detection. No blind spots.
Article 21(2)(i)
Asset management
Auto-generated asset register: every device, every protocol, every connection. Exportable, auditable, NIS2-conform.
Audit-ready
Hash-chained evidence
Every finding is cryptographically sealed. Tamper-proof audit trail that satisfies CCB inspectors. Not logs — proof.
Pilot program

Two weeks. One production center. Full clarity.

We don't ask you to buy. We ask you to see.

1
Connect
One appliance, one cable, one mirror port on your switch. No configuration needed.
2
Discover
Within 15 minutes, RX-OS maps every device on the network. Passively. No disruption.
3
Learn
Over 2 weeks, the brain learns normal behavior. Baselines. Patterns. What belongs, what doesn't.
4
Report
You receive: complete asset register, NIS2 gap analysis, risk scoring, and anomaly findings. Audit-ready.
"The first time we plugged RX-OS into a hospital network, it found 340 devices. The IT team knew about 180. The other 160 were medical devices, building automation, and three unauthorized access points."
— RX-OS deployment, Belgian healthcare infrastructure
Contact

Let's see what's on your network.

Free pilot at one production center. No commitment. You keep the asset report regardless.

Response: Within 24 hours
Pilot: 2 weeks, one site
Deliverable: Asset register + NIS2 gap report
Location: Aalst 9300, Belgium