Solutions

Proven Rail Cyber Security Solutions

Securing rolling stock and infrastructure starts with the problem in front of you, not a product list. Name the challenge and we map it to the right products and a defined security objective and an agreed way to assess it.

Reference architecture

The Secure Train

Our blueprint for protecting a modern train, built on IEC 62443 zones and conduits: enforce separation at the boundaries, detect everywhere, and manage maintenance access through one audited path.

Operator SOC / SIEM CEF feeds · REST API · SOAR / CMDB RazorSecure Cloud · Dashboard Customer teams · optional analyst service Encrypted, prioritised store-and-forward On-board External interfaces Passenger Wi-Fi LTE / 5G · GSM-R Depot & shore Untrusted SECURITY GATEWAY Safety-critical CAN · MVB buses Delta · MVB IDS TCMS Train control & monitoring Delta Comfort CCTV · PIS · HVAC Delta Passenger Wi-Fi · infotainment Delta Passive monitoring plane: Delta detection & Echo asset status from every zone, no interference with train control Digital Maintenance Gateway: MFA · secure software updates Maintenance engineers: named users, agreed time windows
RazorSecure enforcement & detection Trusted on-board zones Untrusted / external

Enforce at the boundary

Security Gateway sits inline between zones (Layer 7 filtering with rail-protocol TRDP support), while DMG is the single audited path for maintenance access.

Detect everywhere, passively

Delta observes hosts and network segments, including MVB/CAN safety-critical buses, without ever sitting in the path of train control traffic.

One operational picture

Echo asset status and Delta alerts meet in Dashboard, used by your teams or by RazorSecure analysts where managed support is contracted.

Case study

Protection Of Digital Train Fleets

How Northern worked with RazorSecure to secure a new digital fleet, and retrofit protection across existing fleets, ahead of NIS compliance deadlines. Remote installation covered every train in the fleet, with more than 700 data points monitored per train and no service disruption.

Read the case study

Talk to our engineering team

Bring your programme requirements, fleet architecture and risk assessment, including any penetration-test findings. We help train builders meet their operators’ specifications and help operators plan security improvements to existing fleets.

Request a demo Explore products