Sooner or later, every industrial plant faces three questions: who is connecting to our equipment, and with whose permission? What happens if a PLC loses its configuration? How do we prove to an auditor that we comply with the standard?
Tridenty answers each one with a product. It is an OT/IT industrial cybersecurity platform for Latin America, built from scratch for environments where uptime is not negotiable, with support in Spanish and an on-premises-first architecture: session logs and PLC backups stay in your infrastructure.
Tridenty SRA: remote access with approval and auditing
In many companies, technicians and vendors have standing access to servers, HMIs, and PLCs. With Tridenty SRA, access is on demand, justified, and approved: every SSH, RDP, VNC, or HTTP session opens from the browser, with no VPN and no agents on target devices, and only after an administrator authorizes it.
- Access Request Flow: the technician requests the connection with a reason, and the administrator approves or rejects it in real time.
- On-premises session recording: text for SSH, video for RDP/VNC.
- Session traffic never goes through the cloud: it flows straight from the browser to the agent in your network. Credentials are encrypted with AES-256-GCM and communications are signed with RSA-2048.
- Mandatory 2FA, granular roles, multi-site, and scheduled access windows that open and close on their own.
- Immutable audit log of every request, decision, and session.
Tridenty Backup: your PLC configurations, always recoverable
When a controller fails or someone changes a program without leaving a record, recovering the last good version can mean hours of downtime. Tridenty Backup automates configuration backup and restore across the whole OT network, with Git-style versioning, change detection, and one-click recovery. It works in air-gapped networks.
- Siemens TIA Portal and Step7, Allen-Bradley / Rockwell Studio 5000.
- Cisco and SCALANCE switches over SSH/TFTP.
- Per-device configurable scheduler.
- On-premises MinIO storage or S3 / Azure.
Tridenty Auditor: ISO 27001 and CNO 1960 with real evidence
Tridenty Auditor is a GRC platform to implement and audit ISO/IEC 27001:2022 and the Colombian CNO Cybersecurity Guide (Agreement 1960). It ships with 134 preloaded controls and a guided path that does not advance without approved evidence. Every approved document is sealed with two signatures and a verifiable SHA-256 hash.
For Colombian power sector companies, CNO Agreement 1960 makes audits mandatory from 2026. Auditor turns that requirement into a work plan with tasks, owners, and evidence.
- Document control, risk management, and Statement of Applicability (SoA).
- Legal requirements matrix and internal audit with findings and CAPA.
- Four roles with segregation of duties: auditors cannot approve their own evidence.
- Cloud SaaS, or on-premises in special cases.
Who is Tridenty for?
- Maintenance and plant managers who need to control vendor access and restore a PLC without long downtime.
- IT and cybersecurity managers who need traceability for every session and compliance evidence.
- Power sector companies that must meet CNO Agreement 1960.
- Manufacturing, oil & gas, and mining, with OT operations across several sites.
Explore Tridenty in our portfolio →
By: Netmask Team