Local HMI exploitation
Attackers who compromise engineering workstations or use stolen VPN credentials issue commands directly on the HMI interface. Network sensors see these as “legitimate operator actions”.
OT / SCADA endpoint defense
The attack happens on the HMI. Your network sensor calls it normal.
Aetheris installs directly on HMIs, SCADA servers and engineering workstations — the machines where operators act and attackers land. Software only. No TAPs, no re-architecture, no downtime.
- HMI layer visibility
- 100%HMI layer visibility
- Time to deploy
- <60mTime to deploy
- Resource utilization
- <1%Resource utilization
About Aetheris
An attacker's mindset, a defender's discipline.
Aetheris was built on decades of experience across offensive and defensive cybersecurity, OT and critical infrastructure security, and the development of complex systems. Shaped by elite military cyber service and senior roles across Israel's technology and cybersecurity ecosystem, we combine an attacker's mindset, a defender's discipline, deep industrial expertise, and advanced engineering capabilities. This multidisciplinary foundation enables us to approach the most complex cybersecurity challenges with technical excellence, operational insight, and a truly holistic perspective.
Engineered to align with
- NIST 800-82
- IEC 62443
- NERC CIP
- NIST 800-53
The product
Aetheris Host-Based OT IDS
A software-only solution installed directly on HMIs, SCADA servers, and Engineering Workstations (EWS). It combines Host Protection and Network Protection to deliver continuous real-time monitoring, threat detection, and comprehensive OT asset mapping.
Key operational metrics
- 100%HMI layer visibility
- Complete ground-truth tracking of local operator actions and process changes.
- <60mTime to deploy
- Rapid software installation with zero network re-configuration needed.
- <1%Resource utilization
- Ultra-lightweight footprint engineered for sensitive SCADA machines.
What it does
Simple & rapid deployment
Fast “click next” software setup with zero re-architecture and no hardware TAPs required.
Real-time safety bound enforcement
Validates process integrity and detects industrial protocol commands that violate operational safety parameters.
Whitelisting & removable media defense
Blocks unauthorized binary/script execution at the host OS level while providing 100% control over USB devices in air-gapped environments.
Seamless fabric integration
Streams structured telemetry directly into SIEM/SOAR platforms (such as Fortinet) via standard Syslog/CEF.
Standards compliance
Engineered to align with NIST 800-82, IEC 62443, and NERC CIP controls.
The critical OT endpoint blind spot
Three ways an industrial control system gets compromised without the network sensor ever raising an alert.
Unmonitored removable media
Air-gapped and isolated industrial networks remain highly vulnerable to infected USB drives and maintenance laptops that bypass network firewalls entirely.
Valid command violations
Network-level IDSs inspect packet signatures but cannot evaluate if a valid industrial protocol command violates physical engineering setpoints or plant safety thresholds.
Our vision
Turn vulnerable control systems into self-defending assets.
Our vision is to eliminate the dangerous blind spots in industrial cybersecurity by transforming vulnerable SCADA servers, HMIs, and engineering workstations into self-defending assets.
While traditional perimeter defenses monitor network wires, we secure the true source of operational reality. By pairing deep host-level visibility with real-time safety bound enforcement, we empower industrial leaders to stop sophisticated cyber threats, prevent human error, and guarantee operational continuity – without complex hardware, plant downtime, or resource compromise.
We envision a world where every critical control system operates with complete integrity, total visibility, and absolute safety.
Deployments
Proven global impact across critical operations
Aetheris Networks is trusted by industrial leaders to secure their most vital control environments. From complex Building Management Systems (BMS) to high-demand Food & Beverage (F&B) manufacturing facilities, our host-based OT security protects operational technology where it matters most. With battle-tested deployments active across Israel and Central Asia, and new implementations expanding throughout Europe, we empower global enterprises to eliminate endpoint blind spots, safeguard physical safety, and ensure zero-downtime continuity.
- Sectors
- Building Management Systems, Food & Beverage
- Active regions
- Israel, Central Asia
- Expanding
- Europe
Founders
Built by people who have defended these systems
Avishay Savir
Co-Founder
& Chief Executive Officer
- Deep industrial protocol architect & endpoint systems specialist.
- Architect of ultra-lightweight host inspection engines for Windows OT platforms.
- Expert in low-overhead execution memory analysis and real-time SCADA whitelisting.
David Kantorovich
Co-Founder
& Chief Business Development Officer
- Veteran SCADA & critical infrastructure cybersecurity leader.
- Proven track record in military and enterprise OT defense strategy.
- Pioneer in converting operational engineering constraints into actionable cyber defense paradigms.
Partners
Working alongside the OT security ecosystem
We integrate with the platforms our customers already run, and deliver through partners who know their regional markets.
Technology partnership
Completing the OT security fabric
FortiGate protects the OT network boundary and FortiEDR secures IT/OT endpoints. Aetheris adds the SCADA application-layer intelligence for proprietary HMI protocols and physical safety bounds — streaming structured telemetry straight into FortiSIEM and FortiSOAR.
Contact
Let's secure the OT endpoint together
Tell us about your control environment and we will get back to you within one business day.