Industrial Attack Simulation Engine for OT Validation
Built on a ruggedized industrial hardware platform as its validation carrier, it performs controlled industrial attack simulations and verification tests. It helps product teams and factories validate OT protection effectiveness and supports evidence collection requirements for IEC 62443, CRA, and SEMI E187.
Hardware
Hardware Teardown
Scroll to take the current unit apart: fanless aluminium heatsink, chassis body, front I/O faceplate, and DIN-rail bracket.
Scroll to disassemble
159 × 132.5 × 35 mm, 0.78 kg aluminium-alloy chassis that barely takes cabinet space.
The fin stack is the chassis — no fan, no filter, nothing to service in a dusty plant.
Intel Celeron J6412 quad-core, 8 GB LPDDR4x, M.2 storage, and all four NIC controllers on board.
LAN 1–4 (3× 2.5GbE + 1× GbE) tap OT segments, USB 3.2 Gen2 exports evidence, HDMI drives an on-site console.
Clips straight onto a 35 mm DIN rail — deploys inside the field control cabinet, no rack required.
Connect & Operate
Patch a cable into any front-panel LAN port and open the management console from a browser on the same segment — no agent to install, no external cloud service. Pick a port below to try it.
INTERACTIVE Click a LAN port on the ICSCracker to patch it in
No link
First screen after linking: device and network topology, task status, hardware health, signature version.
http://<ICSCracker-IP>:8080/
How it runs
Every engagement is a saved, repeatable case. Results map onto the frameworks automatically, and the report exports in one click — no more rebuilding a document out of scattered screenshots and notes.
Pick a step to see the actual screen
A two-step wizard: the case details, then the topology. Scope is SVV-3 and/or SVV-4; the target takes an IP, vendor, model and firmware version; device type is a pick from PLC, HMI, SCADA and RTU through to gateways and switches.
Clear IEC 62443-4-2 and friends before the product ships.
SEMI E187 compliance checks and incoming equipment acceptance.
Penetration testing and vulnerability scanning before handover.
Standards audits, compliance assessment, auditable deliverables.
Coverage
From OT and IIoT protocols through to plain IT networking — and every result maps straight onto IEC 62443, SEMI E187 and EU CRA clauses as deliverable, structured evidence.
A complete path from component to system level, filed by clause and usable as 4-2 component evidence.
Ships with the E187 requirement data: assess clause by clause, get a compliance rate, export a standalone report for acceptance and supply-chain audits.
The SBOM-centred workflow is usable today; the CRA test case itself is still in development, so teams can start building SBOM and VEX assets ahead of the deadline.
Over twenty protocols across OT, IIoT and IT networking.
Plans & Licensing
One platform, three ways to take delivery: install on your own host, buy the appliance preloaded, or image machines in production from the installer ISO. Licence for one year or three.
You have the hardware; take the platform
Quote on request Quote on request
Get a quotePreloaded hardware, online out of the box
Quote on request Quote on request
Get a quoteImage machines in production, many at once
Quote on request Quote on request
Talk to salesPrices exclude tax. Plugins (OT protocol testing, Web/AIoT penetration, port scanning, compliance rules) are licensed per module; hardware and software licences can be purchased separately.
The shipping hardware model changes with supply; the quotation is the binding specification.
Software & Reports
The five-step walkthrough follows one assessment from start to finish. These are three screens in regular use that do not sit on that path.
System Dashboard
Device and network topology, job and scan status, licensing, hardware health and signature version on a single page. The device view on the dashboard is the current model.
Report Management
IEC 62443 and EU CRA test cases in one place, filterable by regulation, status and result, with one-click preview or download of the compliance report.
Security Health Check
Checks the OT site's security baseline across six sections — network architecture, device access, configuration maintenance and the rest — tracking case progress and per-item completion as it goes.
Deployment & Attack Scenario
An authorized engagement built around the ICS-Cracker red-team testing platform: security and OT operations staff define the test scope and authorize the exercise; in an authorized, controlled and traceable environment the platform runs vulnerability validation, attack simulation, lateral movement and ICS-protocol testing against the enterprise (IT) and industrial (OT) networks; and it returns a findings list, risk report and remediation recommendations to strengthen IT/OT security resilience.
Attack Frameworks
Cyber Kill Chain
ICSCracker maps validation scenarios onto the full path of an attack — reconnaissance, delivery, through to impact — so a team can see exactly which stage each protective control stops.
Simulates an attacker gathering assets, protocols and communication relationships, testing whether the environment exposes more than it should.
Builds protocol packets, update files and malicious payload scenarios to check whether protection recognises anomalous input.
Reproduces vulnerability exploitation and unauthorised operation flows, and watches how devices, policies and alerting respond.
Tests whether update, configuration and privilege mechanisms could be used to establish lasting control.
Simulates abnormal control commands, DoS and process interference to confirm what the system blocks and records at the final stage.
ATT&CK Matrix for ICS
ICSCracker does not attack at random. Tests are classified against the ATT&CK Matrix for ICS, so research, validation and reporting all share one vocabulary.
Covers external entry, maintenance channels and lateral movement between segments, confirming that perimeter and segmentation controls hold.
Tests whether attack scripts, protocol commands and abnormal update flows are intercepted on the device and on the platform.
Focuses on interference with control logic, settings and process parameters, examining how OT safety mechanisms reduce process risk.
Tests whether the system still retains traceable evidence when alerting, monitoring or response capability is degraded.
Brings downtime, loss of communication, abnormal control and equipment risk into the test, producing the final report and evidence output.
Specifications
Our expert team is ready to provide product consultation and technical support.
