Abstract: A live demonstration of the full OT virtual patching cycle—from vulnerability discovery through risk prioritization to network-level enforcement—on industrial devices including PLCs, HMIs, and engineering workstations. The scenario centers on two cases representing challenging problems in OT vulnerability management today: a known, exploitable CVE on a legacy device that cannot be patched, and a pre-disclosure vulnerability for which no CVE or patch exists.
The demonstration will walk through:
Asset identification: How industrial devices are automatically discovered and classified across IT/OT environments using passive monitoring and deep packet inspection
AI-driven risk prioritization: Moves beyond static CVSS scores by incorporating EPSS probability, active threat campaigns, asset criticality, and existing security control coverage to surface the vulnerabilities that actually matter—live
Attack path context: How the platform visualizes multi-hop attack paths to crown-jewel OT assets—and applies virtual patches at the right enforcement point without touching the sensitive device
Known CVE virtual patching: The guided workflow from vulnerability identification to firewall policy enforcement—with zero downtime, no device changes, and automatic risk score adjustment to reflect the reduced exposure
Pre-disclosure protection: Identify and block exploitation of a vulnerability before it has been publicly disclosed or assigned a CVE, without exposing the nature of the underlying vulnerability to potential adversaries