Skip to content

Technology

Engineered for the physics of the grid.

VixSiren is physics-grounded, explainable, and edge-first. Here is the shape of the engineering — what it does and why it’s different.

The “how” is our IP. The models, the physics, and the parameters that make VixSiren work are proprietary and protected. What it does, and the principles behind it, are here — the recipe is not.

What we’re up against

The next blackout won’t be an accident.

Power grids are the most critical infrastructure on earth — and they are under sustained, escalating cyberattack.

For more than a decade, adversaries have proven they can reach through the network and into the physical world:

2010

Stuxnet

Purpose-built malware physically destroyed nuclear centrifuges — proof that code can break machines.

2015

Ukraine power grid

The first confirmed cyberattack to switch off a power grid — roughly 230,000 people left in the dark.

2017

Triton

Malware engineered to disable the very safety systems meant to prevent an industrial disaster.

2021

Colonial Pipeline

One ransomware intrusion shut down the largest U.S. fuel pipeline — and triggered shortages across the East Coast.

They don’t steal data anymore. They take the lights.

And the threat is accelerating. AI-generated attacks are now faster, cheaper, and more creative than any human adversary — automating reconnaissance, mutating to slip past detection, and adapting in real time.

Yet the security we depend on was built for a different era. It guards the perimeter and raises an alarm after something slips through — designed to keep attackers out and tell you once they are already in. Against an adversary inside the system, moving at machine speed, that is no longer enough.

VixSiren exists to change that — with a fundamentally new approach.

From reading to verdict

One real-time pipeline — synchronous, before anything acts.

01

Ingest

Every reading and command enters here.

02

Verify

Checked against what is physically possible for the grid.

03

Decide

Trusted, watched, or refused — in real time.

04

Contain

Anomalous influence is refused; the grid’s state is held.

05

Explain

Every verdict, in plain language with confidence.

06

Report

Actionable incident records for the operations centre.

Architecture

Defense in depth — at every layer.

Protection runs from the first sensor reading to the boundary with the enterprise, and localizes an attack to the exact layer it’s operating in. An adversary must defeat every layer at once — which physics does not allow.

Hover a layer to see what it guards.

Read-only by design

How it heals — without ever touching the controls.

It’s the natural question: if VixSiren never operates your grid, how does it stop an attack? Because it defends at the layer of influence, not actuation. It holds the authoritative, physics-grounded picture of what’s true on the grid — and refuses to let manipulated data move it. The attacker’s manipulation lands on nothing: the false influence never reaches a control decision. The grid stays in its correct state because the bad data is rejected before it can drive a bad action — not because VixSiren issued a command.

What it does

Holds the true state of the grid and refuses an attacker’s influence at the information layer — so forged or manipulated data never reaches a control decision, and the physical system stays stable through the attack.

What it never does

Operate a breaker, relay, or setpoint. Override your operators. Take control of the grid. VixSiren advises — your people and the plant’s own protection systems remain the only things that ever act.

The payoff: because VixSiren can never actuate the grid, a compromise of VixSiren can never become a new way to disrupt it. Safe to deploy — by design.

Edge-first

Runs locally at the substation in real time. No dependency on a central cloud to do its job; air-gap capable.

Explainable

No black box. Every decision carries reasoning and confidence an analyst, engineer, or regulator can independently audit.

Tamper-evident

The evidence record is integrity-sealed end-to-end — alterations are detectable, not silent.

Standards & protocols

Speaks the field’s standard protocols — DNP3, Modbus, IEC 61850 — and is engineered around IEC 62443, NERC CIP, and the ERC Kenya Grid Code. Full detail in the Trust Center.

Per-decision latency

Sub-millisecond

Operation

Real-time, synchronous

Scale

Substation → grid-wide

Want the deeper, sanitized architecture?

Bring your hardest question — under NDA, we’ll show you how it holds.