For IT providers and contractors

You run the systems. We attack them.

Running systems and defending them are two different jobs.

For IT providers, refrigeration contractors and line integrators who reach clients’ machines remotely.

What you get

The findings and the fix, with proof.

Proof with every finding

Every finding comes with a step-by-step replay.
The fix, written for you to apply

With Fortify, we write it within 24 hours and send it to you.
A retest

We attack again to check the way in is closed, and record it.
A named lead on every critical finding

A named person on our team handles it.
Dispute a finding

Think one is wrong? A person on our team will re-check it.
Two reports, one set of evidence

One for the board, one for technical people.

How it works with your client

The owner signs
Someone who can authorise testing, usually the owner or managing director, signs the authorisation and rules of engagement.
The scope is agreed
Written down and signed. Nothing outside it is tested.
Eclipse tests from the outside
Nothing to install. Rate-limited, time-boxed, and you can stop it within 60 seconds.
The findings come to you
To whoever looks after the systems: the company’s own team, or you.

The cold chain’s extra doors

The firms that keep plant, cold and computers running can log in from their office or phone.

In store refrigeration, internet access “has long been a supported option”, so contractors can diagnose faults remotely.
With responsibility split, “no single party may have complete visibility into the exposed service”.
Spanish rules require ammonia plants and other large installations to contract an authorised refrigeration firm.

Remote management tools attract attackers, “especially ransomware groups”, and one compromised provider can reach many customers.
At US farm co-operatives, the FBI found intrusions through shared networks or compromised managed services.
In July 2021, Coop Sweden closed about 800 stores after ransomware spread through an IT provider’s remote tool.

What US agencies tell plant owners to do first:

Take plant systems off the public internet
Change default passwords
Remote access through a private connection, or a VPN with phishing-resistant multi-factor authentication
Separate office and plant networks
Practise running the plant by hand

Ask how we work with you and your clients. We reply within one working day.

Talk to us Book a test