On-premises OT evidence and investigation platform

Build traceable OT evidence for NIS2 and IEC 62443.

Keep ICS and SCADA evidence connected, versioned, and entirely inside your environment.

Konseki connects fragmented ICS and SCADA data, investigations, decisions, and versioned graph changes into an audit-ready operational record, including in fully air-gapped deployments.

No cloud dependencyNo SaaS data transferNo agents on PLCsDiffable evidence history

What Konseki is

One evidence chain for the OT environment you are responsible for

01

An OT evidence and investigation platform

Konseki connects ICS and SCADA data, operational relationships, investigations, decisions, and actions in one traceable graph.

02

For industrial operators and integrators

OT security managers, engineers, compliance teams, and automation integrators work from the same evidence without flattening the technical detail.

03

Zones and conduits stay connected to reality

Security boundaries are represented alongside the assets, records, events, and relationships that explain how the industrial environment is actually segregated.

04

Changes become evidence

Versioned graph changes preserve a diffable trail from source evidence through investigation, approval, reporting, and controlled action.

The problem

Your OT evidence exists. The defensible record does not.

Konseki reduces the repeated work of finding, joining, validating, and explaining industrial information before a security decision, compliance review, or audit can move forward.

OT evidence is scattered

Asset records, network information, procedures, alerts, and specialist knowledge live in separate systems. Teams rebuild the same picture whenever an investigation or audit begins.

Network intent and evidence drift apart

Zone and conduit designs, observed relationships, exceptions, and operational changes are difficult to compare when each is maintained in a different format.

Cloud-only analysis does not fit restricted environments

Industrial operators need useful investigation and AI capabilities without moving sensitive OT knowledge to a SaaS platform or placing agents on PLCs.

One connected lifecycle

From OT source data to evidence the organization can defend

Information moves through one evidence chain. Each stage adds useful context without severing the path back to the original source.

  1. 01

    Connect

  2. 02

    Build context

  3. 03

    Investigate

  4. 04

    Collaborate

  5. 05

    Decide

  6. 06

    Act

  7. 07

    Prove

01

Connect

Bring in OT databases, documents, operational exports, and event streams while recording their origin.

02

Build context

Resolve shared entities, model zones and conduits, and preserve relationships so isolated records become one operational picture.

03

Investigate

Explore the relevant graph scope and ask grounded questions with visible supporting OT evidence.

04

Collaborate

Bring coworkers and private AI into the same evidence-backed conversation.

05

Decide

Preserve conclusions, visual context, approvals, and audit-ready reports for the next reviewer.

06

Act

Turn approved decisions into controlled, reviewable playbooks with validation and rollback.

07

Prove

Retain versioned changes, execution outcomes, and the evidence chain supporting NIS2 and IEC 62443 review.

Product walkthrough

See the OT evidence chain take shape

Follow a fictional Northbridge industrial estate from synthetic telemetry in DataCannon to connected evidence, AI investigation, forecasting, and a signed report in Konseki.

Konseki provenance view from the Northbridge demonstration

YouTube loads only when you choose to play the video. Playback shares data with Google. Video privacy

Actual Konseki views from a demonstration workspace, with light and dark variants. The finished report is an original generated example.

See the lifecycle

Follow the OT evidence from source to defensible outcome

Move from connected industrial sources through investigation, human and private-AI collaboration, reports, controlled playbooks, and execution history. Every stage keeps the path back to the original evidence.

Stage 01 / 07Connect

01. Connect

Know what information is available

See every connected source, whether it is ready, and when its information was last processed. Teams know what they can trust before they begin an investigation.

Full image, zoom, and pan

Explore the lifecycle

Built for the people accountable for OT

Technical depth for engineers, clear evidence for reviewers

OT security and compliance managers

Build a shared understanding of operational risk and assemble traceable evidence for NIS2 obligations and IEC 62443 programs without moving sensitive data outside the environment.

ICS and SCADA engineers

Investigate connected assets, network relationships, events, and procedures without rebuilding context across separate tools. Technical detail remains available for validation.

Automation integrators

Give customers a maintainable record of zones, conduits, evidence, decisions, and approved changes instead of leaving topology and compliance knowledge in disconnected project files.

Audit, procurement, and leadership

Review where the platform runs, what evidence supports a conclusion, how the environment changed, and who approved an action. Reports become reviewable records instead of informal summaries.

Why organizations can trust it

Sovereignty and traceability are part of the architecture

Air-gapped by deployment

Run on premises or in fully disconnected networks without routing OT knowledge through a cloud AI or analytics service.

Traceable to source

Answers, reports, and decisions lead reviewers back through graph relationships, source records, retrieved evidence, and the original ingestion path.

Changes stay versioned

A diffable graph history records how operational understanding changed, giving reviewers evidence of what changed, when, and why.

People remain accountable

Private AI assembles context and proposes next steps; people review consequential decisions, while execution history records what actually happened.

Air-gapped technical foundation

Built to operate where OT data must remain

Konseki runs on customer-controlled infrastructure, including fully disconnected networks. Its graph, retrieval, identity, observability, and execution services operate without a mandatory cloud connection.

Platform
Customer infrastructureAir-gapped deploymentOffline installationControlled updates
Core data services
PostgreSQLCassandraJanusGraphQdrantKafkaMinIODuckDB
Operations
KubernetesHelmPrometheusGrafanaLokiKeycloakExpandable storage
AI runtime
Open-source modelsContinuously optimized specificationLocal inferenceCustomer-selected modelsPrivate embeddings
Full image, zoom, and pan

Know the platform is ready for the workload

Monitor capacity, storage, and service health from the same product. Technical teams can plan growth before it becomes a business interruption.

The outcome

Less fragmentation. Faster understanding. Safer action. Defensible evidence.

Less fragmentation

One connected OT evidence model replaces repeated manual handoffs.

Faster understanding

Engineers, reviewers, and private AI begin with the same sourced context.

Safer action

Reviewable playbooks turn approved decisions into controlled execution.

Defensible evidence

Sources, graph changes, reasoning, approvals, reports, and outcomes remain traceable.

See how Konseki builds your OT evidence chain.

Konseki is in private preview. Request a tailored walkthrough focused on your OT environment, NIS2 obligations, IEC 62443 program, and air-gapped deployment requirements. We can use a representative dataset or discuss how your own evidence would move through the platform.

Required fields are marked *. We use your details to respond to your enquiry. Privacy notice.

This form is protected by reCAPTCHA. Verification runs when you submit.