Observed arrival · 2026-09-14
SCADA Pentest: Testing a Plant, Not Just a Network
A source-led guide to assessing SCADA, ICS, and OT environments without treating a running industrial process like an ordinary IT network.
Field notes
The site uses an approach selector to connect plant conditions and available test windows with methods that may be appropriate at different Purdue levels. Its examples distinguish continuous operation, supervised degraded operation, and planned shutdowns, while the method discussion favors passive capture, configuration and logic review, and testing of DMZ or remote-access paths over active scanning on a live control network. The material cites NIST SP 800-82r3, NIS2, IEC 62443, and multiple CISA advisories.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue