Launching soon — Q1 2027. PlantGuard.ai is in final testing with pilot plants. Join the early-access list

Enterprise pilot

Evaluate PlantGuard inside your environment.

A pilot is a real installation on a server you control, reading your own devices, directory and consoles. Nothing is uploaded to PlantGuard: the deployment used for a pilot is the same air-gap-capable architecture as production, so no OT data has to leave the plant for the evaluation to work.

How a pilot runs

Eight steps, in order. Each is agreed with your team before it starts; we do not publish durations here because they depend on your change-control process and fleet size, and we would rather agree them with you than promise them to everyone.

  1. Initial technical discussionYour environment, what you need to learn from the pilot, who owns it on each side, and whether the pilot must be fully offline.
  2. Environment and scope definitionWhich sites, subnets, device families, domain(s) and consoles are in scope; which are explicitly out.
  3. Deployment requirementsServer specification, Windows edition, accounts (a read-only AD service account is recommended), certificates for LDAPS and HTTPS, firewall rules for SNMP, SSH, WMI, syslog and traps.
  4. On-premises installationYour administrator runs the installer on your server; the 30-day evaluation license is built in and verified offline. We assist remotely or on-site as you prefer — we never need remote access to the server.
  5. Asset discovery and integrationInventory import or discovery, SNMP/SSH/WMI credentials in the encrypted vault, Active Directory over LDAPS, syslog and trap forwarding, and any backup, endpoint or physical-access console in scope.
  6. Baseline assessmentPlantGuard's deterministic rules produce the first findings, the Plant Health Score with its six sub-scores, and the AD Compliance baseline. Anything without evidence is marked not assessed, not guessed.
  7. Findings reviewA working session with your engineers: open findings with their evidence, correlated risks, the lifecycle plan, and — if you enable the local engine — the AI Advisor answering your own questions with citations.
  8. Pilot evaluation reportWhat was discovered, what it means, what the product could and could not see in your environment, and what a production deployment would involve. Produced from the pilot installation's own reports; every number in it is traceable.

What you get to check

  • That no OT data leaves the plant — confirm it on your own firewall; the complete list of connections the software can make is published.
  • That findings are traceable: pick any finding and follow it to the records it quotes.
  • That the score is explainable: open "Why N?" on any priority score.
  • That the AI, if you enable it, only cites evidence that exists and refuses when it does not.
  • That the audit log records what your team and the product did.

What a pilot needs from you

  • A Windows server inside the plant network (Windows 10/11 Pro/Enterprise or Server 2016+, 64-bit; about 2 GB disk plus the model file if the local AI is used).
  • An administrator to run the installer and hold the master-key backups.
  • Read-only credentials for the systems in scope (SNMP, SSH/WMI, an AD account, console API keys).
  • Someone who knows the plant to review the findings with us.

Nothing about a pilot creates an obligation to buy; pilot software is covered by an evaluation agreement provided before installation.

Start with a conversation

Tell us about your site and what you want the pilot to prove.