Public Funding for Goldilock Secure Limited

Goldilock is on a mission to revolutionise the way critical infrastructure and industrial control systems are protected. Cyber attacks on our ageing critical infrastructure are increasing. As IT and OT systems continue to converge, Cyber attackers are increasingly weaponizing OT environments to attack hardware and software that control industrial processes and secure OT networks. Unlike typical IT environments, Critical Infrastructure is made up of Operational Technology (OT), a blend of physical objects such as pumps and valves that often have digital sensors/controls linked back to core internet facing IT-networks. This makes every valve, switch, and pump potentially accessible to the internet, vastly increasing the cyber attack surface. The scale of impact (sometimes 20x more than IT devices) and the physical location (widely distributed rather than focused within data centres), together with the growing use of vulnerable open source software libraries, make vulnerability remediation difficult. Goldilock-Industrial is a unique physical network layer hardware solution that closes the 100% risk gap to fractions by allowing OT networks to become invisible, and visible, on demand. Unlike other methods of cyber-protection, Goldilock-Industrial sits between untrusted (internet) and trusted (internal) networks as a truly physical network air-gap, with unique Out-of-Band controls. This allows OT networks and devices to be invisible to attackers, yet accessible on demand, and enables OT defenders to react to cyber incidents in real time. Protocol-standards agnostic, its modular connectivity approach allows integration of OEM devices into a singular ecosystem. Smart funding helps bridge the investment gap, enabling the development of a bespoke, small-form, modular, fit-for-purpose ICS solution, capable of addressing legacy equipment, safety and compliance regulations and simple to install/operate. Innovate UK funding will stimulate capacity building, future revenues and R&D reinvestment, dramatically improving our capability/speed of developing new products/technologies, essential with incoming regulations, providing confidence for Industry 4.0 adoption.

The Goldilock-Industrial project, an initiative by UK-based cybersecurity firm Goldilock, is a pioneering solution designed to protect Critical National Infrastructure (CNI) organisations, particularly those utilising ageing and legacy systems. It addresses a pressing need within the sector, providing enhanced protection where conventional cybersecurity measures fall short. Attacks on CNI, not only undermine public safety and destabilise national security, they lead to loss of life. With the growing threat by hostile-nation states and criminal organisations in the disruption of CNI in UK and Singapore and their allies, the need for protection of our industrial control systems is paramount, but thus far neglected, despite our growing dependancy on these systems. Legislation has changed in UK, Singapore, US, Australia and other nations mandating that networks and ports must only be accessible when needed for the device to function, yet currently the policy is to leave everything connected all the time, with no easy means of physically disconnecting without pulling a cable or using a vulnerable software trigger. Uniquely modular, Goldilock-Industrial integrates seamlessly with various infrastructures, making it a versatile cybersecurity solution for all critical systems within the CNI sector. Its distinct feature lies in the patented remote physical connection and disconnection process via an out-of-band signal trigger. This innovation substantially reduces devices' exposure to potential cyber threats, significantly outperforming traditional cybersecurity methods. For CNI entities such as utility companies or transport networks, Goldilock-Industrial ensures secure connectivity during operational hours and physical disconnection during non-operational periods, offering protection and operational efficiency. It provides a robust solution, filling the security gap in many CNI environments and enhancing resilience against cyber threats. Goldilock-Industrial is set to redefine cybersecurity approaches within the CNI sector, offering a superior, adaptable solution to secure ageing and legacy systems.