HomeCulper-I demo

See a Culper-I demo

One working session with an OT engineer, built around your plant rather than a slide deck. See the Culper-I Early Warning System (EWS) working on real control traffic.

What you will see

  • How Culper-I maps your control network and learns what normal looks like
  • An alert, from detection to the call to your operator
  • Six, the EWS’s AI, summarizing what needs attention
  • How discovery, staging and deployment would run at your control rooms

Prefer to talk now? 973-339-0090

DT6 Culper-I demo

Your details stay with Digital Team Six.

How the session runs.

  1. Your objectives

    We review your current resilience and security goals.

  2. The modules

    See Culper-I’s modules working on real control traffic.

  3. Your controls

    We map control objectives to your organization’s goals.

  4. The plan

    We walk through the framework and how implementation would run.

A preview of the EWS.

Culper-I is DT6’s Early Warning System. In the demo you see it live; here is a taste.

Control network

The Culper-I network map of a water treatment plant's control network, from the historian and engineering workstation down through the HMIs and SCADA server to four PLCs and their field equipment. A Culper-I sensor receives a passive copy of the traffic. A red dashed path marks a write command from engineering workstation ENG-WS-02 to PLC-2 at pump station 3 that is not in the 14-day baseline.
The control network, mapped. Culper-I learns which devices talk and which commands they send, level by level, from a receive-only copy of the traffic. Anything new stands out.
Open full size: Control network

An alert

A high-severity Culper-I alert: an unexpected Modbus write from ENG-WS-02 to PLC-2 changed pump 3A's speed setpoint. The response timeline shows detection at 2:03 AM, an analyst's confirmation, a phone call to the operator on duty at 2:08 and the workstation isolated at 2:12, with 41 minutes left on the 1-hour SLA. Six suggests next steps, and the escalation list is shown.
An alert, end to end. What Culper-I saw, the evidence, the call to your operator and every step since, with the 1-hour clock running on a high-severity alert.
Open full size: An alert

Sample data. Clients, people, devices and addresses are illustrative.

Questions people ask.

No. A rough picture of your sites, control rooms and SCADA system helps us tailor the session.

Yes, and we recommend it. Culper-I gives your integrator a secure, logged path for the remote support they already provide.

No. Monitoring is passive. It listens to a copy of network traffic and never sends commands to control equipment.