NexusSec.The three things that bring manufacturers to us
An OEM or export customer has sent a supplier security questionnaire. Twelve or more pages asking about penetration testing, patching, access control and incident response. The contract renewal is conditional on answering it, and nobody in the plant office knows what half of it means. This is now the most common reason a manufacturer calls us.
The firewall is at end of life. It was installed years ago by a vendor who has since moved on, the rule base has never been reviewed, and the renewal quote does not obviously match what the business actually needs today - usually because the business has added a site since.
Production stopped, or nearly did. A link dropped between plant and head office, or a machine on the office network picked something up. In manufacturing the cost is not abstract: it is a shift of lost output, and everyone in the building knows it happened.
Why a manufacturing network is harder than an office network
A typical office has one site and one class of user. A manufacturer has a plant, an administrative office, often a warehouse or a second unit, and an ERP that cannot move to cloud because it is tied to on-premise systems and to how the shop floor actually works. The links between those sites carry production data, not just email.
On top of that, the network usually grew rather than being designed. A switch added when a line was installed. Wi-Fi extended with consumer access points to reach the far end of a shed. A supplier given remote access once and never removed. The result is a flat network where a compromised laptop in accounts can reach the ERP server, the CCTV recorder and the machine that prints dispatch labels.
What we do
- VAPT that produces a report you can send your customer. Written so a procurement team accepts it, with an executive summary a director can read and technical detail your IT person can act on.
- Segmentation that separates plant, office, servers and guest traffic, so one infected machine cannot reach everything else.
- Firewall sizing, deployment and rule rebuild on Sophos, Fortinet or WatchGuard, with documentation handed over rather than kept in a consultant's head.
- SD-WAN across plant, office and warehouse, with the link costs and the failover worked out before anything is ordered.
- Ongoing management once it is built - patching, monitoring and firewall management, so it does not drift back.
Where we work
We are based in Airoli and attend site across the Navi Mumbai and Thane industrial belt - Turbhe, Rabale, Mahape, Taloja and Ambernath - as well as Mumbai. Remote work is delivered anywhere in India, but for a manufacturer we usually want to walk the site at least once. You cannot design a network for a shed you have never stood in.