# Bastion — OT Security Platform

> Autonomous security for hybrid IT/OT critical infrastructure.

Built by CM & Co Consulting Group AB (DSI Advisory Services), Malmo, Sweden.

## What Bastion Does

Bastion secures the systems that keep the lights on — power grids, water treatment, manufacturing, building automation. It is purpose-built for operational technology (OT) and industrial control systems (ICS).

Five core capabilities:
1. OT Protocol Scanner — Native Modbus TCP/RTU, Siemens S7, BACnet, OPC-UA, DNP3, EtherNet/IP, IEC 104, PROFINET. Real network interaction.
2. IEC 62443 Assessment Engine — Automated zone/conduit security assessment against SL1-SL4 with remediation guidance.
3. Continuous Monitoring — 24/7 state tracking, golden baseline management, register drift detection, anomaly ML.
4. Purple Team Orchestration — IT-to-OT lateral movement exercises via MITRE Caldera-OT.
5. Compliance Evidence Generator — Timestamped, SHA-256 immutable reports in PDF, OSCAL, STIX, and ATT&CK Navigator formats.

## Regulatory Alignment

- EU NIS2 Directive — 160,000+ entities in scope. Bastion automates the compliance workflow.
- EU Cyber Resilience Act — SBOM tracking, vulnerability reporting (mandatory September 2026).
- IEC 62443 — Zone/conduit assessment, SL1-SL4 scoring, auditor-ready gap analysis.
- Cybersakerhetslagen — Sweden's NIS2 transposition, in force January 2026.

## Tech Stack

- Frontend: Next.js 15 + React 19 + TypeScript + Tailwind CSS + shadcn/ui
- Backend: FastAPI (Python, async) + SQLAlchemy + Celery + Redis
- Scanner: Standalone Python service with native OT protocol libraries
- Database: TimescaleDB (PostgreSQL) for time-series monitoring data
- Deployment: Railway (cloud) + on-premises scanner via WireGuard VPN

## Open Source

Community Edition (AGPL): asset discovery, protocol parsers, NIS2 self-assessment — free forever.

## Links

- Website: https://bastion.digitalsecurityinsights.com
- Parent: https://digitalsecurityinsights.com
- GitHub: https://github.com/Samueladewole/bastion

## Contact

CM & Co Consulting Group AB
Malmo, Sweden
https://digitalsecurityinsights.com