A short text for OT owners. The full conditions are set out in the written commitment signed before installation.
A copy of the traffic on the monitored segment (full capture), protocol metadata (including industrial commands), detection alerts, passive equipment fingerprints. Nothing is collected from the equipment itself: the sensor only listens.
On the sensor (on the client's premises) and on a server dedicated to the client, in the Hetzner data centre in Falkenstein, Germany (EU). Nothing is published and nothing is passed to third parties.
Only the Provider's technical team performing the evaluation and the people designated by the client. The report is delivered to the client only.
Within 5 working days of delivering the report, raw data is deleted from the sensor, the dedicated server and the analysis workstations, with an evidence log (checksums before and after) and written confirmation.
No active scanning, no querying of equipment, no blocking rules on the data path, no connection into the client's network beyond the sensor.