OT / ICS Risk Assessment Platform

Your NIS2 & IEC 62443
risk assessment.
In hours, not weeks.

Build compliance, visibility and security in days — not months.

ARA automates the OT cybersecurity risk assessment process — from IEC 62443 gap analysis to executive-ready PDF reports. What consulting firms bill 4–8 weeks for, ARA delivers in a single session.

✉ Request Free Demo See how it works →
142
IEC 62443 SL-2 controls mapped automatically
<4h
From first login to full risk assessment report
6
Professional deliverables generated automatically
3×
Less expensive than a traditional OT audit
Professional Deliverables

6 documents that used to cost
€50,000–150,000. Generated automatically.

Every ARA assessment produces a complete set of professional documents — the same deliverables large enterprises pay consulting firms months to produce.

RISK MATRIX CRIT HIGH SL-2 COVERAGE 59% IEC 62443 SL-2 FINDINGS ● CRITICAL: 7 ● HIGH: 12 ● MEDIUM: 18 ● LOW: 5 CONNECTED ARA RISK ASSESSMENT DASHBOARD Usine Nord SAS · IEC 62443 SL-2 · June 2026 59%
OT Risk Assessment Report
Complete OT Risk Assessment Report

Full risk scoring per zone, CVSS-OT findings prioritized by severity, remediation roadmap and executive summary. The core deliverable.

~35–45 pages · PDF · Auto-generated
100% 74% FR1 61% FR2 38% FR3 82% FR4 55% FR5 29% FR6 71% FR7 IEC 62443 — FUNCTIONAL REQUIREMENTS GAP ANALYSIS GAP CRITIQUE PARTIEL CONFORME TARGET FR1 FR3 FR5 FR7 GAP -41%
IEC 62443 Gap Analysis
IEC 62443 Gap Analysis

Detailed gap between current state and target Security Level (SL-1 to SL-4), control by control, for all 7 Functional Requirements.

~20–28 pages · PDF · Per FR domain
INTERNET / WAN NGFW IT ZONE SERVER ERP ACTIVE D DMZ HISTORIAN PROXY VPN OT ZONE — SL-2 SCADA HMI PLC/RTU FIELD DEVICES SENSORS ACTUATORS DRIVES NETWORK SEGMENTATION BLUEPRINT — IEC 62443-3-3 IT ZONE DMZ OT ZONE FIELD INTERNET FW IT ZONE DMZ OT ZONE FIELD IEC 62443
Network Architecture
Network Segmentation Blueprint

OT/IT zone and conduit mapping per IEC 62443-3-3, target architecture with segmentation recommendations and firewall rules guidance.

~15–20 pages · PDF + diagrams
ASSET ID TYPE ZONE FIRMWARE RISK SL PLC-001-A Siemens S7-300 Zone A v2.1.4 ⚠ C SL-2 HMI-003 Wonderware Zone A v8.2.1 H SL-1 SCADA-SVR-01 Ignition 8.1 DMZ v8.1.2 ⚠ C SL-2 RTU-007-B ABB RTU560 Zone B v4.0.3 L SL-1 FW-OT-DMZ-01 Fortinet FG-60F DMZ v7.2.1 H SL-2 VFD-012 Danfoss VLT Zone B v3.1.0 L SL-1 TOTAL: 47 assets · 7 CRITICAL · 15 HIGH · 25 LOW-MEDIUM 47 OT ASSET INVENTORY & CLASSIFICATION — IEC 62443-2-1 Generated by ARA · 14 June 2026 ASSET RISK SL PLC-001 SL2 HMI-003 SL1 SCADA SL2 RTU-007 SL1 47
Asset Management
Asset Inventory & Classification

Complete OT asset register with criticality classification, firmware versions, exposure level and IEC 62443 Security Level per device.

~10–15 pages · PDF + Excel export
Q1 PHASE 1 IT/OT Firewall MFA Remote IR Plan OT Q2 PHASE 2 Patch OT Asset Inventory PAM Vendors Q3 PHASE 3 IEC 62443 SL-2 NIS2 Docs SOC OT Setup Q4 ✓ NIS2 COMPLIANT ✓ NIS2 COMPLIANCE ROADMAP — 12 MONTH PLAN €120,000–185,000 total program · ARA platform: €2,990/year Q1 AUDIT GAP Q2 FIXES PRIO Q3 IMPL CTRL Q4 NIS2 ✓
Compliance Roadmap
NIS2 Compliance Roadmap

12–18 month remediation plan with phased milestones, effort estimates, budget projections and NIS2 compliance checkpoints per quarter.

~12–18 pages · PDF + project plan
EXECUTIVE SECURITY DASHBOARD Usine Nord SAS · June 2026 · CONFIDENTIAL SECURITY SCORE 59 / 100 SL-2: 59% · GAP: 41% 7 CRITICAL 12 HIGH 142 CONTROLS NIS2 STATUS Art.21b NON-CONF Art.21a PARTIEL Art.21g PARTIEL Art.21h PARTIEL TOP ACTIONS 1. IT/OT Firewall — 3w 2. MFA Remote — 2w 3. IR Plan OT — 4w PROGRAM COST €120k–185k total SECURITY SCORE 59 / 100 7 CRIT 12 HIGH 142 CTRL
Executive Reporting
Executive Security Dashboard

One-page COMEX summary: global security score, top 3 risks, investment priorities and ROI projection. Designed for board-level presentation.

1–2 pages · PDF · Board-ready

📄 Download Sample Report — Usine Nord SAS

Real ARA output · IEC 62443 SL-2 · 12 pages · PDF · See exactly what your assessment produces

⬇ Download Sample PDF
Platform Preview

A real assessment. Completed in 3h 47min.

ARA Assessment Dashboard
Site: Usine Nord · IEC 62443 SL-2 · NIS2 Entité Importante
GAP IDENTIFIED Score: 59%
OVERALL SL-2
59%
Target: 100%
CRITICAL FINDINGS
7
Immediate action
HIGH FINDINGS
12
Within 30 days
CONTROLS ASSESSED
142
IEC 62443 SL-2
FUNCTIONAL REQUIREMENTS — IEC 62443
FR1
74%
FR2
61%
FR3
38%
FR4
82%
FR5
55%
FR6
29%
FR7
71%
TOP FINDINGS
CRITICALNo IT/OT network segmentationFR5.2
CRITICALRemote SCADA access without MFAFR1.4
CRITICALNo OT incident response planFR6.1
HIGHPLC firmware outdated (3 years)FR3.2
MEDIUMIncomplete asset inventoryFR2.1
✓ PDF Report ready — 37 pages · CVSS-OT · MITRE ATT&CK ICS · NIS2 mapping Try ARA Free →
Standards covered
IEC 62443-3-3IEC 62443-4-1IEC 62443-4-2 NIS2 DirectiveISO 27005NIST SP 800-82 NIST CSFNERC CIPMITRE ATT&CK ICS CVSS-OTISA99ANSSI
Pricing

Transparent. No consulting surprises.

FREE
€0
1 assessment · no card required
  • 1 full IEC 62443 assessment
  • Basic risk dashboard
  • Summary PDF report
  • NIS2 overview
Get started free
PROFESSIONAL
€299 / month
or €2,990/year
  • Unlimited assessments
  • All 6 professional documents
  • Full PDF reports + remediation
  • MITRE ATT&CK ICS tagging
  • NGOT feed integration
  • API access
Start trial
ENTERPRISE
€399 / month
or custom pricing
  • Everything in Professional
  • White label option
  • SSO / Azure AD
  • Dedicated SLA
  • Custom standards
Contact us
Ready

Run your first OT risk assessment today.

No setup. No consultant required. Free first assessment.

✉ Request Demo