The OT security vocabulary, without the hand-waving.

Reference architecture that splits industrial…Reference architecture that splits industrial networks into levels L0–L5; CyberDragon Edge sits at L3 / industrial DMZ.

System security requirements standard for ind…System security requirements standard for industrial automation and control systems, organized by zones and conduits.

Widely deployed industrial protocol (TCP and…Widely deployed industrial protocol (TCP and RTU) for reading and writing register values on controllers.

Distributed Network Protocol used heavily in…Distributed Network Protocol used heavily in electric and water utilities for SCADA telemetry and control.

Platform-independent industrial interoperabil…Platform-independent industrial interoperability protocol with structured address spaces and sessions.

Lightweight publish/subscribe protocol common…Lightweight publish/subscribe protocol common in IIoT sensor fleets.

Mirror port or hardware tap that copies traff…Mirror port or hardware tap that copies traffic for passive monitoring without inline risk.

Ordered stages of an intrusion; CyberDragon c…Ordered stages of an intrusion; CyberDragon correlates them across W15, W60, and W24 windows.

Mean time to detect. Lab-validated CyberDrago…Mean time to detect. Lab-validated CyberDragon range: 8.0–20.5 seconds.

NIST FIPS 204 post-quantum signature algorith…NIST FIPS 204 post-quantum signature algorithm used in CyberDragon hybrid session JWTs.

Classical elliptic-curve signature paired wit…Classical elliptic-curve signature paired with ML-DSA-65 for hybrid, quantum-resilient signing.

Open Policy Agent — policy engine that can de…Open Policy Agent — policy engine that can deny an OT action even after human approval.

PostgreSQL row-level security, used for struc…PostgreSQL row-level security, used for structural multi-tenant isolation.

CISA Known Exploited Vulnerabilities catalog…CISA Known Exploited Vulnerabilities catalog — exploited-in-the-wild CVEs tracked in the Threat Atlas.

Factor Analysis of Information Risk — quantit…Factor Analysis of Information Risk — quantitative scenario risk model used by the risk engine.

Security orchestration, automation and respon…Security orchestration, automation and response; CyberDragon runs Temporal-orchestrated playbooks with approvals.

North American bulk-electric reliability stan…North American bulk-electric reliability standards; CyberDragon auto-maps controls from live events into signed evidence packets for utilities.

NIST Cybersecurity Framework 2.0 — the enterp…NIST Cybersecurity Framework 2.0 — the enterprise maturity model behind one of CyberDragon's framework packs.

Information security management system standa…Information security management system standard; CyberDragon's compliance auto-mapper aligns live events to its controls.

Trust Services Criteria for service organizat…Trust Services Criteria for service organizations; auto-mapped from live CyberDragon events alongside the other framework packs.

EU Cyber Resilience Act. Bridge mapping onto…EU Cyber Resilience Act. Bridge mapping onto existing framework packs is on the CyberDragon roadmap, not shipped today.

Keyed-hash message authentication code that s…Keyed-hash message authentication code that signs every Edge-to-Core telemetry batch before transport.

Mutual TLS; optional additional transport aut…Mutual TLS; optional additional transport authentication between Edge collectors and Core alongside HMAC-SHA256.

Secrets and key-management system that custod…Secrets and key-management system that custodies CyberDragon's Ed25519 signing material and hybrid PQC keys.

Role-based access control. CyberDragon ships…Role-based access control. CyberDragon ships a 7-tier RBAC model from read-only to super-admin and mssp-operator.

Attribute-based access control, enforced via…Attribute-based access control, enforced via OPA alongside RBAC for platform authorization and OT action guardrails.

System for Cross-domain Identity Management —…System for Cross-domain Identity Management — provisions users and groups into CyberDragon tenants from an external IdP.

Structured Threat Information Expression and…Structured Threat Information Expression and its transport protocol; CyberDragon exchanges intel both directions so an existing TI platform stays the system of record.

National vulnerability and platform identifie…National vulnerability and platform identifiers mirrored locally by CyberDragon's Vulnerability Intelligence (VSI) module for offline-safe query.

Open Source Vulnerabilities database, mirrore…Open Source Vulnerabilities database, mirrored alongside NVD/CVE/CPE and CISA KEV inside VSI.

Adversary tactic/technique framework CyberDra…Adversary tactic/technique framework CyberDragon maps kill-chain detections against, including ICS-specific tactics.

CyberDragon's cascading kill-chain correlatio…CyberDragon's cascading kill-chain correlation windows — 15 minutes, 1 hour, and 24 hours — that assemble burst, lateral-movement, and slow-dwell activity into one incident.

Endpoint (or extended) detection and response…Endpoint (or extended) detection and response — the category CrowdStrike Falcon leads and that CyberDragon complements at the OT protocol layer.

Identity federation protocols CyberDragon sup…Identity federation protocols CyberDragon supports for connecting an enterprise IdP without replacing sovereign session JWTs.

CyberDragon's Authorized Assessment Program —…CyberDragon's Authorized Assessment Program — ethical hacking under a signed Rules of Engagement, from scoping through remediation tracking.

The team maintaining the live Threat Atlas fe…The team maintaining the live Threat Atlas feeds, the IOC corpus, and the lab-validated attack scenarios.

Information Sharing and Analysis Center; Cybe…Information Sharing and Analysis Center; CyberDragon's Threat Research Unit aligns with ICS-ISAC, E-ISAC, and FS-ISAC.

Managed security service provider. CyberDrago…Managed security service provider. CyberDragon's PostgreSQL RLS isolation and MSSP portal support multi-tenant operations at scale.

Bring-your-own-cloud — an MSSP deployment mod…Bring-your-own-cloud — an MSSP deployment mode where the partner hosts CyberDragon under an Axix license.

Distributed event-streaming platform that ing…Distributed event-streaming platform that ingests all CyberDragon telemetry before normalization and detection.

Durable workflow orchestration engine that ru…Durable workflow orchestration engine that runs CyberDragon's SOAR playbooks with human-approval steps.

Graph database backing CyberDragon's cyber-ph…Graph database backing CyberDragon's cyber-physical attack-path graph for blast-radius questions.

Indicator of compromise; CyberDragon's live c…Indicator of compromise; CyberDragon's live corpus carries over 15,000 IOCs fused from public and Threat Atlas sources.

Tactics, techniques, and procedures — the MIT…Tactics, techniques, and procedures — the MITRE ATT&CK vocabulary CyberDragon detections are tagged against.

Command and control infrastructure; TI fusion…Command and control infrastructure; TI fusion matches C2 indicators before a campaign reaches the encryption or impact stage.

How long an intruder persists undetected. Cyb…How long an intruder persists undetected. CyberDragon's W24 window exists specifically to catch slow APT dwell.