Accurate claim
These tools help identify exposure candidates via TCP connect checks. An open port is a lead for investigation—not proof of a confirmed exploit or active compromise.
Critical infrastructure · open source · MIT
ICS OT Protector
Defensive OT/SCADA exposure discovery across water, energy, building automation, and rail. PowerShell and Bash scanners for authorized networks: TCP reachability checks, sector port catalogs, and analyst-ready JSON reports.
Sectors
Former standalone repos are archived. Development continues here.
- Water & wastewater (WUP) Interactive scanners; CISA water-sector oriented checks
- Power grid & substation (EGP) CLI subnet scans; ICS protocols and named vendor CVE ports
- Building automation (BAS Guardian) BACnet/BMS-oriented exposure review
- Rail & transit (ROP) Remote-access and ICS protocol exposure checks
What it does
- Scans authorized IPv4 subnets for reachable remote-access and OT/ICS-related TCP ports
- Labels findings by severity for triage conversations with IT and OT teams
- Emits JSON reports with sector metadata and a normalized findings array
- Points operators to public CISA/ICS-oriented remediation guidance in-repo
Explicit non-goals
No credential testing, no exploit payloads, no config changes, no IPv6 scanning, and no substitute for a full penetration test or continuous monitoring product.
Why this matters on a resume
For hiring managers evaluating OT/ICS or security-automation candidates, this repo shows end-to-end delivery: sector research, scripting, shared libraries, tests/CI, and clear safety documentation.
Built and maintained by SpinfoSecurity. Authorized defensive use only.