Accurate claim
These tools help identify exposure candidates via TCP connect checks. An open port is a lead for investigation—not proof of a confirmed exploit or active compromise.
PowerShell + Bash · network checks · MIT
ICS OT Protector
Public proof of scripting, TCP reachability troubleshooting, and handoff-ready reporting. Sector scanners for water, energy, building automation, and rail—same craft IT services needs: automate the check, label the finding, document the next step.
Sectors
One monorepo, four scanners
Former standalone repos are archived. Development continues here.
Behavior
What it does
- Scans authorized IPv4 subnets for reachable remote-access and OT/ICS-related TCP ports
- Labels findings by severity for triage conversations with IT and operators
- Emits JSON reports with sector metadata and a normalized findings array
- Points operators to public CISA/ICS-oriented remediation guidance in-repo
Explicit non-goals
No credential testing, no exploit payloads, no config changes, no IPv6 scanning, and no substitute for a full penetration test or continuous monitoring product.
Authorized defensive use only. SpinfoSecurity