ARKA™ OT-Sentinel Passive ICS Sensor
Passive asset discovery and threat detection for SCADA, PLC and substation networks, with zero impact on operations.
You cannot protect devices you don't know about. OT-Sentinel connects to a SPAN or TAP port and listens only. It builds a live inventory of every PLC, RTU, IED, HMI and engineering workstation, learns normal behaviour, and alerts on new devices, unauthorised firmware changes, unusual commands and known ICS malware.
Because it never transmits on the OT network, it is safe to deploy in running plants. Alerts can leave the plant through an ARKA DD-100 data diode to the central SOC.
Key features
Technical specifications
| Model | OTS-100 (ruggedised, DIN-rail) / OTS-1000 (1U rack) |
|---|---|
| Capture ports | 4 x 1 GbE RJ-45 receive-only (OTS-100); 8 x 1/10 GbE (OTS-1000) |
| Protocols | Modbus, DNP3, IEC 104, IEC 61850, OPC DA/UA, S7, EtherNet/IP, BACnet, Profinet |
| Operating temperature | -20 to +60 °C (OTS-100) |
| Power | 24-48 VDC dual input (OTS-100); 230 VAC (OTS-1000) |
| Integration | Syslog/CEF to SIEM, ARKA Sentinel AI-SOC native |
| Warranty & support | 5 years OEM warranty, threat-intel updates |
Typical applications
Power substations & SLDCs
IEC 61850 / IEC 104 monitoring.
Water & wastewater
SCADA visibility for municipal utilities.
Oil & gas
Pipeline RTU and refinery DCS monitoring.
Metro & railways
Signalling and traction SCADA monitoring.
Related products
ARKA™ RA-Gate Secure OT Remote Access
Just-in-time, recorded, MFA-protected vendor access to plants, replacing always-on VPNs and TeamViewer.
View product →ARKA™ DD-100 Data Diode
Hardware-enforced one-way UDP gateway. Data leaves the protected network; nothing can come back in.
View product →ARKA™ DD-1000 Protocol-Aware Data Diode
High-throughput data diode with built-in proxies for TCP, files, OPC UA, Modbus, historians and video.
View product →