DERSec provides a purpose‑built OT cybersecurity platform, DERSec Sentry, that performs deep packet inspection and physics‑based anomaly detection across DER protocols such as IEEE 2030.5, SunSpec Modbus, DNP3, and OpenADR. The solution offers real‑time threat monitoring, automated compliance reporting for standards like NERC CIP and IEC 62351, and sub‑five‑minute incident‑response playbooks, all without requiring per‑device agents.
Funding
Funding not disclosed
Founders
Product
Problem
Distributed energy resources (DERs) such as solar inverters, battery systems, and EV chargers communicate using specialized OT protocols that traditional IT and generic OT security tools cannot inspect. This creates blind spots, making it difficult to detect protocol‑valid but operationally unsafe commands, comply with emerging standards (e.g., IEEE 2030.5, NERC CIP), and respond to attacks across large, agent‑less fleets.
Solution
DERSec delivers a purpose‑built OT cybersecurity platform for DER environments. The DERSec Sentry engine performs deep packet inspection of IEEE 2030.5, SunSpec Modbus, DNP3, OpenADR and other DER protocols, correlating commands with real‑time physics models of voltage, frequency, and power flow to identify cyber‑physical threats. Continuous compliance mapping generates audit‑ready reports for NERC CIP, IEC 62351 and IEEE 2030.5. Automated incident‑response playbooks can isolate compromised devices in under five minutes, preserving grid stability. The solution is offered as a cloud, on‑premise, or edge deployment and requires no per‑device agents, enabling sub‑second detection across thousands of DER endpoints.
Target Audience
Primary customers are utilities, DER aggregators, and large energy‑service providers that manage fleets of solar inverters, battery storage, EV chargers or microgrid controllers and need OT security and regulatory compliance.
Features
- Deep packet inspection and protocol‑aware threat detection for IEEE 2030.5, SunSpec Modbus, DNP3, OpenADR and proprietary DER protocols
- Physics‑based anomaly detection (Power IOCs) that validates commands against voltage, frequency and power‑factor constraints
- Real‑time monitoring with <1 s detection latency and 93 % reduction in false positives
- Automated compliance engine continuously maps device behavior to NERC CIP, IEC 62351 and IEEE 2030.5, producing audit‑ready reports on demand
- Sub‑five‑minute automated incident‑response playbooks that isolate compromised DERs without disrupting grid operations
- Agent‑less architecture scalable to 10,000+ devices, deployable in cloud, on‑premise or edge environments
- Integrated DERSync protocol gateway for secure IEEE 2030.5 aggregation, multi‑protocol translation, and PKI‑based certificate management
- DERSim digital‑twin module for offline attack simulation and security‑control validation