Built to pass your audit, and ours.
Aragog is a security product sold into regulated plants, so it is held to the same rules it helps you meet. Here is exactly where we stand.
- MVP
NIS2
D.Lgs. 138/2024
What it asks
Continuous monitoring, asset management and incident evidence for in-scope manufacturers.
What Aragog does
Evidence pack in Italian generated from live monitoring data, mapped to ACN measures.
- In progress
Cyber Resilience Act
Important product, Class II
What it asks
Secure development, vulnerability handling and, from December 2027, third-party conformity assessment.
What Aragog does
IEC 62443-4-1 development process, 24 h / 72 h vulnerability reporting, certifiable product type frozen by Q3 2027.
- MVP
GDPR
Data minimisation
What it asks
Process only what is needed; OT traffic can contain user names and operator activity.
What Aragog does
Metadata, not payloads, by default. Pseudonymised user fields, optional 21-day retention, Art. 28 DPA and DPIA template.
- MVP
Data residency
EU-owned, EU-hosted
What it asks
Plant topology is sensitive and should not leave EU jurisdiction.
What Aragog does
EU-owned providers on portable plain VMs and the S3 API. Per-tenant encryption keys, optional customer-held keys.
- Every release
SBOM & disclosure
CycloneDX · CVD
What it asks
Know what is inside the product and how vulnerabilities are handled.
What Aragog does
CycloneDX SBOM with VEX for every release, public CVD policy and security.txt, at least five years of free security updates.
The sensor, hardened
- Receive-only capture NIC with no IP stack
- No inbound ports. Management traffic is outbound only
- Secure boot and TPM-sealed disk encryption
- Signed A/B updates with automatic rollback
- No remote shell by default; support tunnels are customer-approved and time-boxed
We say “EU-owned, EU-hosted”, not “certified sovereign”. Claims on this page describe the product and its cloud, not this website.
Put a sensor on one line. See what it finds.
A pilot is a real, passive deployment at one of your sites. Tell us a little about your plant and we will get back to you to scope it.
Passive only. Nothing on your process network changes.