Configured per site, not re-coded per sector
The same behavior engine covers every vertical below. Zones, lines, and time windows are configuration, not custom code.
Electrical substations & transmission
Perimeter breach, copper-theft staging, fence-line loitering, transformer-approach tampering, after-hours anomaly, correlated into one incident per attack chain.
A vehicle dwells on the access road at 04:02. A person loiters at the fence line for six minutes. The perimeter line is crossed at the transformer yard. EXCOM scores the chain as one critical incident. Before the cut, not after the outage.
Water & wastewater utilities
Chemical-storage access, perimeter breach, after-hours movement, and vehicle activity across large, lightly-manned perimeters, deployed through site configuration alone.
Restricted-zone access at a chemical store, after-hours movement, unexpected vehicle activity: the water profile is the substation platform with different zones and time windows: configuration, not code.
Data centers
Tailgating at controlled doors, after-hours presence, unauthorized-visitor behavior.
Rail & transit
Track trespass, cable-theft staging, abandoned objects, platform crowding.
Ports & maritime
Yard intrusion, restricted access, gate and truck behavior, convoy movement.
Renewable energy
Theft staging, vehicle intrusion, tamper approach on remote, low-connectivity sites.
Pipelines & oil / gas
Vehicle presence, loitering near line assets, route deviation along corridors.
Federal & government facilities
Tailgating, lobby and visitor anomalies, loitering at controlled perimeters.