Fortiphyd

Fortiphyd Logic Inc. provides cybersecurity solutions tailored for industrial control systems (ICS) and operational technology (OT) networks. Founded in 2016 by David Formby and Raheem Beyah, the company originated from Dr. Formby's Ph.D. research at the Georgia Institute of Technology. Recognizing a critical gap in the market for security solutions that cater to both IT and OT professionals, the founders commercialized their research, partly supported by SBIR contracts from the U.S. Navy and Air Force, to protect critical infrastructure.

The company's business model is centered on providing software and training to organizations that operate critical infrastructure, such as power generation, water utilities, manufacturing, and the oil and gas industry, as well as government and military entities. Fortiphyd's mission is to foster collaboration between security and operations teams to effectively secure these vital systems.

A key offering is LogicWatch Pro, a Controller Endpoint Detection and Response (CEDR) solution. Unlike traditional network monitoring that is blind to local device access, LogicWatch Pro deploys software agents directly onto industrial controllers. These agents, written in standard controller programming languages, continuously gather diagnostic data to detect anomalies and unauthorized modifications, even those made via direct serial or USB connections. This software-only approach eliminates the need for new hardware or network architecture changes, providing a historical snapshot for faster issue diagnosis and reducing unexpected downtime.

Fortiphyd also provides Virtual Training Grounds, a platform that gives security professionals hands-on experience in a realistic environment. These training modules utilize 3D process simulations connected to virtual ICS networks, allowing users to practice defending against real-world attack scenarios. The training covers a wide range of protocols and assets, including PLCs, HMIs, and IIoT devices, and includes courses on foundational concepts like Cyber-Informed Engineering (CIE) and PLC static analysis to improve the security of control logic.

Keywords: industrial control systems security, operational technology security, ICS cybersecurity, OT cybersecurity, critical infrastructure protection, Controller Endpoint Detection and Response, CEDR, PLC security, SCADA security, cybersecurity training, cyber-physical systems, industrial network monitoring, asset detection, anomaly detection, David Formby, Raheem Beyah, Georgia Tech, network intrusion detection, virtual training, 3D simulation