Illustration: a scan film, in point clouds, of the places a food business owns: a cold-storage site from the air, a cold-store aisle, an engine room, a processing line, a refrigerated truck at a loading dock, a packhouse and the Cantic mark. The labels show synthetic readings and addresses.
MeatDairyFruit and vegetablesCold stores
We break into your food business before a criminal does.
From your website to your cold rooms, lines and the firms that connect in. With Fortify, we write the fix within 24 hours.
Real attack Supermarkets across Europe See the attacks
Food and cold chain
One way in can switch off your cold rooms.
Every line to the internet is a door.
Eclipse, our own model trained to attack, keeps going until it can prove full control.
In plain words: an attacker that works for your company.
How far Eclipse goes
- Website
- Apps
- Logins
- Cloud
- Servers
- Internal network
- Machines
What your business runs on
We know what a food business runs on. So do criminals.
Outside firms
- Refrigeration contractor
- Line integrator
- Your IT provider
Remote access
- VPN
- Remote desktop
- RMM
- Vendor portals
- 4G routers
-
Farm and co-operative
- Irrigation automation
- Climate control and alarms
- Grain store controls
-
Plant
- PLC
- HMI
- SCADA
- Engine room
- Cold rooms
- Weighing and labelling
- HACCP records
- Building management
-
Cold store
- Refrigeration supervisor
- Warehouse system
- Cranes
- Temperature recorders
- Docks
-
Truck
- Reefer telematics
- Temperature recorders
-
Shop
- EDI orders and invoices
- Store refrigeration
-
Office
- ERP
- Payroll
- Backups
-
Nine European countries
Supermarkets across Europe
Store refrigeration taken over remotely and switched to defrost; chilled and frozen food thrown away.
Sources France 24 (AFP) CNBC (Reuters) NBC News Euronews Infobae
-
France
Supermarkets across France
Fridges driven up to 50 °C; about 700 of 10,000 supermarkets affected, the minister said.
Sources Click2Houston (AP) France 24 (AFP) ABC News (Australia) Techniques de l’Ingénieur (AFP) Public Sénat CERT‑FR (ANSSI) INCIBE‑CERT
-
Canada
A farm in Canada
Hacktivists manipulated a grain-drying silo’s temperature and humidity through internet-accessible controls, creating potentially unsafe conditions.
Compared
This is not a yearly pentest.
| A normal pentest | Cantic |
|---|---|
| Once a year | Day and night, and on every change |
| A PDF weeks later | Proof as it happens, with a replay |
| Stops at the website | From the website to the server and the machine |
| You work out the fix | We write the fix within 24 hours |
| You hope it holds | We attack again to check it holds |
Under your control
Inside the rules you sign.
Guardrails and data privacy for food businesses, their plants and their cold chain.
Nothing runs until you sign
An authorisation and rules of engagement, signed by someone entitled to authorise the test.
Inside the limits you set
Your scope, hours and limits. It stops once it can prove control.
Stop it within 60 seconds
Rate-limited and time-boxed, so your systems do not slow down.
Every action on the record
Hashed and timestamped in a ledger you can inspect, and followed live.
A person on every critical finding
A named lead on our team.
No outside AI company sees your data
Eclipse is our own model, on our own servers.
Destroyed when the work is done
Deleted in several steps on our side; we do not keep it. First test reports: 14 days unless you subscribe.
Your IT provider gets the fix
Findings and fixes go to your own team or your IT provider.
Regulation
The rules a food business answers to.
- NIS2 names food businesses in industrial production, processing and wholesale distribution (Annex II). 1
- It applies from medium size: 50 or more staff, or more than €10 million in both turnover and balance sheet. 2
- Customers in scope must manage the security of their supply chain, including their suppliers and service providers (Article 21(2)(d)). 1
- Ammonia engine rooms and other large refrigeration installations need a maintenance contract with an authorised refrigeration company. 3
Questions
What buyers ask us
- Have you tested companies like ours?
- We do not name clients, but at one food supplier Eclipse found a way to switch the fridges off remotely.
- Our refrigeration contractor connects from outside. Will you test that?
- Yes, inside the scope you sign: Eclipse tries each contractor login, VPN and remote-desktop tool from outside.
- Does it help with NIS2?
- Yes: every step is recorded, from the signed scope to the retest, but it does not certify compliance.
- We already have an IT company. Why you?
- Your IT company runs your systems and we attack them: two different jobs.
How it starts
Your results in one day.
You sign the rules
An authorisation and rules of engagement, signed before anything runs.
Eclipse tests what is in scope
From the outside, the way an attacker would. There is nothing to install.
We put the findings on the table
In plain words, with what to do. Every finding comes with proof.
Sources
- EU Official Journal (publications.europa.eu), Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive), . Read on .
- European Commission, SME definition. Read on .
- Boletín Oficial del Estado (BOE), Real Decreto 552/2019, de 27 de septiembre, por el que se aprueban el Reglamento de seguridad para instalaciones frigoríficas y sus instrucciones técnicas complementarias, . Read on .