Documented Firms Directory

Browse Verified OT/ICS Incident Response Firms

Pre-verified firms for refineries, pipelines, electric utilities, and manufacturing, filtered by certification, insurance panel, geography, documented response time, and rate.

MITRE ATT&CK for ICS • NERC CIP • TSA Pipeline • ISA/IEC 62443

Showing 23 of 23 firms

Start an RFP
Partially verifiedResearch-Sourced

OT cybersecurity and ICS protection services, including incident response.

Services: OT cybersecurity services · ICS protection · Incident response

Coverage: US, government and industry · HQ Houston, TX

Visit websiteredtrident.com
Partially verifiedResearch-Sourced

OT cybersecurity and NERC CIP compliance services and technology.

Services: OT cybersecurity · NERC CIP compliance

Coverage: US and Europe · HQ Waltham, MA

Visit websiteindustrialdefender.com
Partially verifiedResearch-Sourced

OT integrity and cybersecurity software and services (PAS Cyber Integrity), part of Hexagon since 2020.

Services: OT integrity and cybersecurity · OT asset visibility and management

Coverage: Global, via Hexagon · HQ Houston, TX

Visit websitehexagon.com
Partially verifiedResearch-Sourced

OT/ICS cybersecurity and cybersecurity compliance services for industrial and defense programs.

Services: OT asset cybersecurity · Risk Management Framework and compliance · Cybersecurity lifecycle test planning

Coverage: US · HQ Huntsville, AL

Visit websiteaesolutionshsv.com
Partially verifiedResearch-Sourced

Engineering and operational technology firm with an industrial cybersecurity service line.

Services: Industrial cybersecurity · Operational technology services · Networking and virtualization

Coverage: US · HQ Sioux Falls, SD

Visit websiteinterstates.com
Partially verifiedResearch-Sourced

Industrial systems integration and cybersecurity services, part of Rockwell Automation.

Services: Industrial systems integration · Industrial cybersecurity

Coverage: US, via Rockwell Automation · HQ Columbia, MO

Visit websiterockwellautomation.com
Partially verifiedResearch-Sourced

Industrial automation services firm with industrial cybersecurity solutions for critical systems.

Services: Industrial cybersecurity · Industrial automation services

Coverage: US

Visit websiteetechgroup.com
Partially verifiedResearch-Sourced

OT assessment and cybersecurity, disaster services, and automation services for process industries.

Services: OT assessment and cybersecurity · Disaster services · Automation services

Coverage: US · HQ Winston-Salem, NC

Visit websiteavidsolutionsinc.com
Partially verifiedResearch-Sourced

Engineering firm with an IT/OT and cybersecurity division for industrial facilities.

Services: IT/OT and cybersecurity · System integration

Coverage: US · HQ Mobile, AL

Visit websitehargrove-ca.com
Partially verifiedResearch-Sourced

OT incident response retainer services firm, documented from public research (OT Emergency Incident Response Retainer product).

Services: OT/ICS incident response · Incident response retainer · Digital forensics

Partially verifiedResearch-Sourced

Global incident response and cyber security consultancy, documented from public research (publicly announced Dragos IT/OT partnership).

Services: Incident response · Digital forensics · OT/ICS security

Visit websitenccgroup.com
Partially verifiedResearch-Sourced

OT/IoT security services firm, documented from public research.

Services: OT/IoT security services · Incident response

Visit websiteshieldworkz.com
Partially verifiedResearch-Sourced

ICS security services firm, documented from public research.

Services: ICS security assessment · Incident response

Visit websitepivotpointsecurity.com
Partially verifiedResearch-Sourced

OT incident response: rapid response retainers, urgent response for active incidents, 24/7 OT responders.

Services: OT/ICS incident response · IR retainer programs · Threat baselines and tabletop exercises

Coverage: US-based, global response · HQ Hanover, MD

Visit websitedragos.com
Partially verifiedResearch-Sourced

German OT security firm with incident response among its published service lines, alongside security engineering and testing.

Services: Incident response · Security engineering · Security testing

Coverage: Germany and Europe · HQ Germany

Visit websiteadmeritia.de
Partially verifiedResearch-Sourced

OT cybersecurity firm with digital forensics and incident response (DFIR) among its published service lines.

Services: Digital forensics and incident response · OT vulnerability assessment · Penetration testing · Industrial security tabletops

Coverage: Europe and the Middle East · HQ United Kingdom (HQ), offices in Germany and the Middle East

Visit websiteotifyd.com
Partially verifiedResearch-Sourced

OT/ICS security consulting firm, documented from public research.

Services: OT security assessments · IEC 62443 compliance · NERC CIP consulting · OT incident response planning

Visit websiteotsecuresystems.com
Partially verifiedResearch-Sourced

Engineering-led OT/ICS incident response firm, documented from public research.

Services: OT incident playbooks · Consequence-aware incident response · IEC/ISA 62443 alignment · Purdue-model segmentation

Coverage: Gulf Coast

Visit websitearistacyber.io
Partially verifiedResearch-Sourced

Maritime and OT cybersecurity consulting firm, documented from public research.

Services: Maritime cybersecurity · OT cybersecurity consulting · Incident response management · Ports and terminals cybersecurity

Coverage: Gulf Coast

Visit websiteabs-group.com
Partially verifiedResearch-Sourced

OT/ICS consulting firm with a life sciences specialization, documented from public research.

Services: OT cybersecurity consulting · Life sciences OT security · Compliance enablement

Visit websitelevel5cyber.com
Partially verifiedResearch-Sourced

OT/ICS consulting firm, documented from public research.

Services: NERC CIP compliance · ISA/IEC 62443 guidance · ICS/OT incident response

Visit websitecybersynergetics.com
Partially verifiedResearch-Sourced

OT/ICS security firm with an AI-powered SOC offering, documented from public research.

Services: NERC CIP compliance automation · 24/7 OT SOC · SCADA protection

Visit websitecybersilo.tech
Partially verifiedResearch-Sourced

Dual OT/ICS and cloud incident response firm with a 24/7 emergency retainer, documented from public research.

Services: OT/ICS incident response retainer · Cloud incident response (AWS/Azure/GCP) · SCADA/ICS penetration testing · Kubernetes security

Visit websiteispectratechnologies.com

VendorQuals, Specialist Vendor Intelligence

Every firm is scored against certification, insurance-panel, and case-study evidence.

directory source: live database

Other Service Providers in this category

Not response firms

These companies provide platforms, tools, and managed services for this specialization. A responder investigating an incident here may rely on their tooling. A buyer building a platform may hire them. They do not send responders to your incident.

Armexaarmexa.comConsultancy

OT cybersecurity engineering firm: assessments, network segmentation, and incident response drills. Houston, TX.

ABS Groupabs-group.comManaged service

Risk and reliability services firm running an Industrial Security Operations Center (ISOC).

Beacon Securitybeaconsecurity.ioConsultancy

OT cybersecurity consultancy for SCADA and DCS environments across the Middle East, Europe, and South Asia.

RMC Globalrmcglobal.comConsultancy

Mission assurance and industrial cybersecurity services for federal and commercial critical infrastructure.

AFRYafry.comConsultancy

Engineering consultancy with a dedicated cyber security practice for industrial clients.

Axiansaxians.co.ukConsultancy

Industrial IT services brand (VINCI Energies) covering digitisation and cyber security for industry.

Black & Veatchbv.comConsultancy

Engineering, consulting, and construction firm for critical infrastructure, with OT cyber advisory.

Opswrightopswright.comConsultancy

Secure-by-design engineering consultancy for critical infrastructure.

Atumcellatumcell.comConsultancy

Boutique penetration testing firm with an OT/ICS line and IEC 62443 assessments. Brookline, MA.

Security Risk Advisorssecuringthings.comConsultancy

OT/industrial cybersecurity services (Securing Things practice): OT security, pen tests, purple teams, managed services.

Velta Technologyveltatech.comConsultancy

Industrial cybersecurity and digital safety: visibility programs, continuous monitoring, managed service tiers. Joined BW Design Group.

UTSI Internationalutsi.comConsultancy

ICS and OT systems integrator (40+ years) with an OT cybersecurity practice, including pipeline-specific applications.

Siemens Canada (CIDC)siemens.caConsultancy

Critical Infrastructure Defense Center, Siemens' customer-facing cybersecurity competency for critical infrastructure in Canada.

Simplesensesimplesense.ioPlatform

Installation Resilience Platform for mission operators on defense installations.

Titanium Industrial Securitytitaniumindustrialsecurity.comConsultancy

Cybersecurity for automation and control systems, led by experienced practitioners.

Trinity OT Securitytrinity-ot.comConsultancy

OT system integrator working with best-of-breed technology partners.

S2 Grupos2grupo.esConsultancy

Technology consultancy with an industrial cybersecurity department (Spain).

SecuriCIPsecuricip.comConsultancy

ICS/OT/SCADA cybersecurity consultancy and training services.

Fortiphyd Logicfortiphyd.comTraining

Hands-on OT cybersecurity training and cyber ranges (subscription).

Framatome Cybersecurityframatome.comConsultancy

Industrial cybersecurity business of Framatome, protecting IT and OT in nuclear environments.

ICSRangeicsrange.comTraining

OT/ICS security training platform with real-life labs.

iGo Cyberphysicaligo-cyberphysical.euConsultancy

Offline OT cyber resilience and NIS2/DORA evidence for EU SMEs.

Invictuxinvictux.comConsultancy

Cybersecurity firm specializing in ICS and OT.

Manganmangancyber.comConsultancy

Specialty engineering, automation, and integration company with a cyber division.

Cyboltcybolt.comManaged service

Managed cybersecurity and risk management services, including SOC-as-a-Service and XDR.

Defentosdefentos.nlConsultancy

OT and IT cybersecurity partner (Netherlands).

DTS Solutionshawk-eye.ioManaged service

HAWKEYE managed CSOC and XDR with an incident response team.

1898 & Co.1898andco.burnsmcd.comConsultancy

Business, technology, and security consultancy within Burns & McDonnell serving critical infrastructure.

Airbus Protectprotect.airbus.comConsultancy

Airbus' cybersecurity, safety, and sustainability services subsidiary; incident response and digital forensics among its published services.

Ampyx Cyberampyxcyber.comConsultancy

Services-only international OT security consulting across North America and Europe.

Arcova (MorganFranklin Cyber)arcova.comConsultancy

Advisory, consulting, and managed services firm (Arcova, formerly MorganFranklin Cyber).

Arista Cyberaristacyber.ioConsultancy

Engineering-led industrial cybersecurity and functional safety provider.

DNVdnv.comConsultancy

Independent risk management and assurance expert operating in 100+ countries.

Complete Cybercygard.ukConsultancy

Cyber resilience support for transport and critical infrastructure operators (UK).

DTN Advisorydtnadvisory.comConsultancy

Advisory covering incident response coordination, ransomware negotiation, forensics, and crisis management.

Vayronvayron.chConsultancy

Switzerland's first pure-play OT security partner.

See the full ecosystem across all specializations, or request inclusion.