Securenok Security & Trust
Security built for operational technology
Securenok develops cybersecurity technology for operational technology and industrial environments where security, availability and operational continuity are critical.
Security is an integral part of how we develop, deliver and operate the SNOK® platform
Security & Compliance
Cyber Essentials Plus - Certified
Securenok is certified to Cyber Essentials Plus. The certification includes independent assessment and technical testing of key cybersecurity controls within our corporate IT environment.
ISO/IEC 27001 - Certification in progress
Securenok operates an Information Security Management System based on ISO/IEC 27001:2022.
DNV is our certification body, with certification targeted for June 2027.
IEC 62443 - Secure OT development
SNOK® is developed using secure development practices and technical security principles from the IEC 62443 series. The platform also supports Asset Owners in addressing relevant monitoring requirements for Industrial Automation and Control Systems.
Product Security
Secure by design for OT
SNOK® is designed specifically for operational technology environments.
The platform provides continuous security monitoring through network, endpoint and PLC sensors.
The sensor architecture is designed so that sensors deployed in the OT environment transmit information towards the central SNOK Platform only. It is not possible to initiate communication from the Platform back into sensors in the monitored OT network.
SNOK can be deployed fully on-premises and does not require direct Internet connectivity. The SNOK Platform provides all common interfaces for securely accessing alarms, security events and other relevant data.
Vulnerability Management
Securenok performs monthly vulnerability assessments of the SNOK® platform.
Relevant CVEs and vulnerabilities affecting SNOK components and dependencies are reviewed, assessed and documented.
A recurring vulnerability report is distributed to relevant customers and partners. Identified vulnerabilities are assessed based on severity and potential impact, with remediation and customer communication handled where required.
Customer Data Protection
Securenok follows the principles of data minimisation, least privilege and secure handling of customer information.
Customer data transferred to Securenok is:
- encrypted in transit
- encrypted at rest
- stored only on controlled Securenok systems
- accessible only to authorised personnel based on business need
- retained only for as long as required for the agreed purpose
- securely deleted when no longer required
SNOK is designed to process operational and technical data rather than personal data. Limited personal data may occur incidentally in technical logs or support material.
Securenok does not currently use subprocessors to process personal data within the SNOK service.
Health Check & POC Data Handling
Securenok Health Checks and Proof of Concepts are designed to keep customer OT data within controlled environments throughout the engagement.
Customer data is handled in two locations:
1. SNOK hardware in the customer's environment
A dedicated SNOK hardware appliance is deployed within the customer's environment for the duration of the Health Check or POC.
Data collected by the SNOK Platform remains on the dedicated hardware during the engagement.
At the end of the Health Check or POC, the appliance is securely sanitised before reuse, where customers data is securely erased. A sanitisation report is provided to the customer.
2. Securenok Security Centre
Data required for security analysis may be transferred securely to Securenok's Security Centre at our headquarters in Sandnes, Norway.
The data:
- is transferred encrypted
- remains exclusively on Securenok-controlled servers
- is stored and analysed at our headquarters in Sandnes
- is not processed or stored in public cloud services
The environment is covered by Securenok's Cyber Essentials Plus certification, which includes independent assessment and technical testing of cybersecurity controls.
Security Governance
Securenok manages information security through its Integrated Management System and ISO/IEC 27001-based Information Security Management System.
This includes risk management, supplier security, incident management, business continuity, access control, vulnerability management and secure development.
Our suppliers are assessed based on the security risk they may represent to Securenok, our products and our customers.
Security Resources
Additional documentation
Additional documentation is available to customers and partners on request, including:
- Cyber Essentials Plus Certificate
- Data Processing Agreement
- Security and compliance information
- Vulnerability information
- ISO/IEC 27001 certification status
Security-sensitive documentation and internal procedures are not published publicly and may be provided where appropriate based on customer need and confidentiality requirements.
Contact
Contact
Questions regarding security, privacy, compliance or vulnerability reporting: Security: secure@securenok.com
Understanding SNOK® — common questions
Operational Technology (OT) security is a specialized field focused on protecting industrial automation and control systems (IACS) from cyber threats. It covers technologies that control critical infrastructure such as power grids, water treatment systems, and production lines in manufacturing facilities.
We offer the SNOK® platform, a cybersecurity monitoring system designed to detect early signs of intrusions. The solution consists of a unique combination of network sensors (NIDS), endpoint sensors, and PLC sensors, which together provide full visibility into the operational environment.
The risk has increased due to ongoing digitalization and the Industry 4.0 trend, which connects previously isolated production systems with IT networks. Cyberattacks have become a real threat to production continuity, employee safety, and the stability of public services.
IT security focuses primarily on protecting data, while OT security prioritizes the continuity of industrial processes and operational stability. OT systems often rely on legacy devices that do not support traditional security tools such as antivirus software or frequent updates to patch security holes.