SECIRA - The holistic
risk management tool

SECIRA goes beyond traditional risk analyses: instead of one-off checklists, it provides continuous, automated risk analyses - with an interactive digital twin, context-based recommendations for action and an attack perspective that makes the actual impact on business processes visible. SECIRA is a risk management software that provides a holistic view of even complex infrastructures.

The digital twin is a dynamic, visual image of your entire infrastructure - including IT, OT and cloud systems, roles, processes, buildings and external partners. It is fed from your existing data sources, constantly updated and serves as the basis for risk analyses, action planning and decision-making processes.

Identifying and understanding risks in a company can be a complex task. The digital twin makes the description and derivation of risks tangible and visual. Modeling creates an overview of dependencies in the business processes and thus also a reliable and explainable data situation.The automated attack tree uses the digital twin as a basis and thus represents the visual linkto the risk matrix. Identified risks can be verifiedalong the model and the attack path in the tree and traced with any depth of penetration .

SECIRA works on a daily basis. New vulnerabilities, threats and changes in your infrastructure are automatically detected and evaluated - thanks to a constantly growing threat librarybased on MITRE data and findings from the ICS offensive team, among other things.

SECIRA draws on your existing systems - e.g.CMDBs, network data, asset directories, IDS/IPS. No additional sensors or hardwareare required. By using established legacy systems, validated information is usedas the basis for risk analysis, allowing SECIRA to be integrated quickly and deliver reliable results based on real, maintained data.

SECIRA is not an ISMS, but the perfect complement. It focuses on technical, infrastructural and role-related risks. The results can be incorporated into any ISMS. On request, our consultants will support you until you are audit-capable in accordance with ISO27001, IT-Grundschutz or industry-specific B3S.

We will be happy to support you in setting up your ISMS.

SECIRA is flexibly scalable and is suitable for both small companies and large organizations with complex security requirements.

SECIRA supports companies in the ISO27001 process with holistic risk analysis by proactively identifying risks within a structured attack tree. Identified findings are clearly highlighted and displayed in an intuitive dashboard to enable quick and well-founded decisions.

SECIRA is ideal for companies in sectors with high security requirements, such as rail, IT, industry, manufacturing, energy supply, healthcare and critical infrastructure.

SECIRA's interactive visualizations and reports are designed to be understandable for non-technical stakeholders, which facilitates communication and decision-making.

SECIRA uses state-of-the-art encryption and security protocols to protect your data at all times. All data is processed in compliance with the GDPR.

The implementation of our solutions usually takes around 10 days, depending on the size and complexity of the existing IT and OT infrastructure.

SECIRA uses existing data - so the initial outlay for youis low. Our ICS consultants accompany you step by step: from the initial data acquisition to modeling and operational use. You also benefit from default settings, drag-and-drop functionality and an interface that even non-technicians can understand.

Yes, SECIRA supports companies in complying with IEC62443, ISO27001, NIS2, IT Security Act2.0 and other relevant standards - not just audit-capable, but practical and proactive.

Yes, SECIRA is customized with interfaces to your systemsas part of the implementation project .

SECIRA evaluates risks based on context - not just "whether something is vulnerable", but how it affects your specific business processes. An example: A vulnerability in the VPN may be harmless in an extension - but it can become business-critical in the main system. SECIRA identifies risks in the context of business processes.

SECIRA is not a pentest tool in the traditional sense, but it is an ideal complement to such analyses. Instead of simulating attacks itself, SECIRA seamlessly integrates the results of penetration tests into the holistic risk analysis, network information and vulnerabilities. This ensures that no gaps are overlooked and provides you with a well-founded assessment in the context of your overall infrastructure.

By the way: ICS itself offers penetration testing as a service - for IT, OT, physical security and much more. This experience flows directly into the development of SECIRA.

No. Although SECIRA was developedspecifically for high-security industries, the platform is also suitable for small and medium-sized enterprises (SMEs).
The high level of automation reduces effort and costs - often by up to 70% compared to manual processes. Companies with a mix of IT and OT in particular benefit from SECIRA.

SECIRA knows that legacy systems are indispensable in many infrastructures. Instead of relying on replacement, SECIRA pursues a defense-in-depth approach in which additional layers of protection are placed around older systems.
In this way, even insecure or unpatchable componentscan be operated securely - without critical dependencies or high costs.

Yes, SECIRA supports over 50 industry protocols, which are continuously being expanded. All findings from real ICS projects and penetration tests are incorporated into the protocol library. This means that communication in heterogeneous OT landscapesis also reliably evaluated - an important factor for your operational security.

Absolutely. SECIRA not only recognizes protocols, but also their specific versions and security features. Depending on the asset type, the platform evaluates WLAN or LAN communication, for example, and provides best practice information directly. This enables precise risk analysis, even for less well-known or specialized protocols.

The costs depend on the scope (e.g.number of locations, assets,desired services). We offer customized packages - from pure subscription use to full risk management support from the ICS team of experts. You are welcome to arrange a free demo for an assessment.