Soon after launching Wurldtech Security Technologies in 2006 as a consulting company focused on helping manufacturers eliminate security vulnerabilities from plant floor automation networks, CEO R. Tyler Williams came to a surprising discovery. “We found security problems in the field that you wouldn’t believe,” Williams says, “poorly coded programs, bad ladder logic for PLCs, the kinds of things that, if exploited, would cause significant downtime and employee safety problems.”
So Williams decided to expand Wurldtech’s business and develop Achilles Satellite, a testing platform that lets manufacturers and automation equipment manufacturers identify and diagnose vulnerabilities in any device, system, or application found on an IP-based process control network.
Unlike other tools that attempt to protect industrial networks by erecting firewalls and intrusion detection barriers, Achilles Satellite lets manufacturers and automation vendors continuously test PLCs, OPC-enabled devices, and other automation equipment. The testing tool, which often is used in conjunction with a firewall, allows manufacturers to monitor and evaluate network disruptions and pinpoint and diagnose failures.
Using data collected by Achilles Satellite in the field, Wurldtech has also developed an extensive database of real-world control system vulnerabilities and fixes that manufacturers can use to quickly mitigate security holes.
The Achilles Satellite tool has caught on quickly among manufacturers, mainly large, multinational oil and gas companies, as well as automation hardware and software vendors. Large oil and gas manufacturers, including Royal Dutch Shell, British Petroleum, and Exxon, use the tool to test the security of automation networks before and after deployment, Williams says. So far, 24 manufacturers have licensed the Achilles Satellite testing appliance, which sells in the $100,000 range.
Some manufacturers, including Shell, have gone so far as to require automation vendors to certify that their systems are secure using the Achilles Satellite tool. For them, Wurldtech has developed a certification benchmark program, and, at press time, 14 automation vendors, including Emerson, ABB, Invensys, Honeywell, and Yokogawa, had received certification. “If you want to be on the preferred vendor list for Shell, you need to get the certification,” Williams says. “It’s that simple.”
Next Wurldtech plans to expand into new markets and is targeting makers of chemicals and other process-oriented products.
Data Points
Year founded: 2006
Product name, category: Achilles Satellite, appliance for testing and analyzing the security of high-availability process control networks and components