Enterprise pilot
Evaluate PlantGuard inside your environment.
A pilot is a real installation on a server you control, reading your own devices, directory and consoles. Nothing is uploaded to PlantGuard: the deployment used for a pilot is the same air-gap-capable architecture as production, so no OT data has to leave the plant for the evaluation to work.
How a pilot runs
Eight steps, in order. Each is agreed with your team before it starts; we do not publish durations here because they depend on your change-control process and fleet size, and we would rather agree them with you than promise them to everyone.
- Initial technical discussionYour environment, what you need to learn from the pilot, who owns it on each side, and whether the pilot must be fully offline.
- Environment and scope definitionWhich sites, subnets, device families, domain(s) and consoles are in scope; which are explicitly out.
- Deployment requirementsServer specification, Windows edition, accounts (a read-only AD service account is recommended), certificates for LDAPS and HTTPS, firewall rules for SNMP, SSH, WMI, syslog and traps.
- On-premises installationYour administrator runs the installer on your server; the 30-day evaluation license is built in and verified offline. We assist remotely or on-site as you prefer — we never need remote access to the server.
- Asset discovery and integrationInventory import or discovery, SNMP/SSH/WMI credentials in the encrypted vault, Active Directory over LDAPS, syslog and trap forwarding, and any backup, endpoint or physical-access console in scope.
- Baseline assessmentPlantGuard's deterministic rules produce the first findings, the Plant Health Score with its six sub-scores, and the AD Compliance baseline. Anything without evidence is marked not assessed, not guessed.
- Findings reviewA working session with your engineers: open findings with their evidence, correlated risks, the lifecycle plan, and — if you enable the local engine — the AI Advisor answering your own questions with citations.
- Pilot evaluation reportWhat was discovered, what it means, what the product could and could not see in your environment, and what a production deployment would involve. Produced from the pilot installation's own reports; every number in it is traceable.
What you get to check
- That no OT data leaves the plant — confirm it on your own firewall; the complete list of connections the software can make is published.
- That findings are traceable: pick any finding and follow it to the records it quotes.
- That the score is explainable: open "Why N?" on any priority score.
- That the AI, if you enable it, only cites evidence that exists and refuses when it does not.
- That the audit log records what your team and the product did.
What a pilot needs from you
- A Windows server inside the plant network (Windows 10/11 Pro/Enterprise or Server 2016+, 64-bit; about 2 GB disk plus the model file if the local AI is used).
- An administrator to run the installer and hold the master-key backups.
- Read-only credentials for the systems in scope (SNMP, SSH/WMI, an AD account, console API keys).
- Someone who knows the plant to review the findings with us.
Nothing about a pilot creates an obligation to buy; pilot software is covered by an evaluation agreement provided before installation.
Start with a conversation
Tell us about your site and what you want the pilot to prove.