Multi-source ingestionPipeline
Hawk events, Falco, OT logs, protocol sensors — planned.
Axix Hawk
Pipeline · Early access
OT SIEM & SOAR for environments where IT tools fail
Collect industrial signals, correlate with Hawk license + Falco events, and respond with safety-aware playbooks — on the same platform that already licenses and hardens your edge software.
- Pipeline
- IEC 62443-minded
- Human-in-the-loop
Why OT-native
Typical IT SIEM/SOAR assumptions break on the plant floor.
| Capability | Typical IT SIEM/SOAR | Axix Hawk OT direction |
|---|---|---|
| Protocols | HTTP/DNS | Modbus, DNP3, OPC-UA, S7comm (planned) |
| Assets | Laptops/servers | PLC, HMI, SCADA, engineering stations |
| Response | Block IP | Controlled OT actions + human approval |
| Context | User accounts | Process safety + Purdue levels |
SIEM (planned capabilities)
Correlation enginePipeline
License tamper chains with industrial signals.
Detection examplesPipeline
Unauthorized PLC write, engineering change outside window.
DashboardsPipeline
Asset inventory, alert timeline, compliance mapping.
SOAR (planned capabilities)
PlaybooksPipeline
License tamper, unauthorized PLC access, heartbeat cascade, lateral movement.
Human-in-the-loopPipeline
Tiered approvals — safety-first before isolation actions.
IntegrationsPipeline
Hawk revoke, firewall, notify, ticketing — planned connectors.
LIVE TODAY
Air-gap + Falco already ship with Hawk
You do not wait for SIEM to protect licenses on the factory floor. Offline TTL and runtime detection are available now.
Honesty table
| Capability | Status |
|---|---|
| Issue / renew / revoke licenses | Live |
| Hardware binding | Live |
| axix-agent + grace / air-gap | Live |
| Client SDKs | Live |
| White-label vendor dashboard | Live |
| Falco runtime detection | Live |
| Webhooks + audit | Live |
| OT SIEM | Pipeline |
| OT SOAR | Pipeline |
Purdue-oriented thinking
Visibility planned around levels that matter for ICS — not only IT DMZ metaphors.
Level 0–1
Process and basic control — protocol sensors planned.
Level 2–3
Supervisory and operations — correlate with Hawk heartbeats.
Level 4–5
Enterprise — license and revoke remain under vendor control.
Licensing that respects plant constraints
Keep verification local when change freezes and air-gaps rule the floor.
- Offline TTL for maintenance windows
- Minimal heartbeat payloads
- No PII in agent traffic
Emergency revoke without plant chaos
Pull compromised software without rewriting your OT network.
- Console revoke
- Heartbeat enforcement
- Immediate exit on restart
Pipeline honesty for OT SIEM/SOAR
Licensing is live today; industrial detection modules are clearly labeled pipeline.
- Early access conversations
- Core stack available now
- Industrial solution playbooks
Trial Hawk for OT software
Start free and validate offline TTL and revoke against a non-production cell.
- Air-gap friendly options
- No credit card
- Talk OT constraints with us
OT FAQ
No — licensing heartbeats are minimal and air-gapped mode avoids constant cloud calls.
Join Enterprise early access
These modules are under active development. Do not present as generally available unless your account team confirms early-access status.
Product visuals
Three console views and three real-world moments for this page — each with a full caption.
Console view for Ot Security: license inventory, bind status, and org filters in one workspace. Operators scan Active versus Revoked rows, confirm machine fingerprints, and jump into a client without leaving the grid. Search and column controls keep large fleets readable. This frame is unique to this page so the visual story matches the URL you opened.
Second dashboard for Ot Security: heartbeat health, revoke timing, and anomaly hints sit side by side. Use it to brief security on what “one heartbeat” looks like before a PoC. Charts stay light-themed with navy accents for Axix Hawk. Nothing here is reused from another marketing route.
Third console moment for Ot Security: deployment analytics and seat pressure across client orgs. Leaders see where licenses concentrate and where renewals are due. Export-friendly layout supports review packs. Paired with this page’s copy so buyers never see a generic stock screen.
People moment one for Ot Security: practitioners reviewing Hawk controls in a real workspace. The scene grounds licensing talk in day-to-day operations instead of abstract icons. Lighting and wardrobe stay professional and brand-safe. Captured specifically for this page’s narrative so visitors never confuse it with another product route.
People moment two for Ot Security: collaboration around ship-or-hold decisions after a revoke drill. Teams align on evidence — bind failure, kill-switch timing, audit export — before a customer demo. Atmosphere matches Axix Hawk’s light navy product language. Unique to this route’s gallery.
People moment three for Ot Security: field or office context for how this capability lands with buyers. Use it to show human stakes behind machine-locked software. Composition avoids logos and keeps faces secondary to the work. Written and imaged only for the Ot Security page experience.