Radiflow SCADA Security Suite

Short Summary

Radiflow is an industrial cybersecurity vendor headquartered in Tel Aviv, Israel, founded in 2009 as part of the RAD Group, a collection of independently operated companies under joint strategic guidance. The RAD Group has helped establish over a hundred high-tech companies since the 1980s, generates over $1.3 billion in yearly revenue, and currently includes 10 companies. Radiflow, initially focused on secure industrial networking hardware, expanded into a broad portfolio of hardware, software, and managed services for securing ICS/SCADA environments, with deployments across more than 3,000 sites worldwide.

The text frames the core OT security problem as a shift from merely detecting threats to prioritizing them amid growing network complexity, geographic distribution, and connectivity with corporate IT networks. OT teams historically emphasized human and process safety over IT asset security, but modern cyber risks can now cause equipment damage, process disruption, and potentially catastrophic outcomes. As a result, traditional passive intrusion detection is portrayed as insufficient without intelligent risk management that evaluates impact and guides action.

Radiflow’s flagship iSID Industrial Threat Detection platform provides passive, non-intrusive monitoring, device discovery, topology mapping, and detection using deep packet inspection and an industrial protocol knowledge base. A key differentiator is “Insights,” which prioritizes threats by business-process risk using exploitability analysis (covering 60+ attack types), process-based network partitioning, and attacker capability modeling informed by a database of past incidents. Modular capabilities include vulnerability-focused detection, rule-based policy monitoring, anomaly detection, operational auditing, and maintenance window enforcement. Scalability is addressed through iSAP Smart Collectors for remote segments and iCEN for centralized monitoring. Additional offerings include iSEG Secure Gateway for secure remote access plus inspection and isolation, iSOC for MSSP multi-tenant operations, and iSEC assessments delivering findings and mitigation plans.

Interesting Facts

• Radiflow is headquartered in Tel Aviv, Israel and was established in 2009.
• Radiflow is part of the RAD Group, which operates multiple independent companies under joint strategic guidance.
• The RAD Group has helped establish over a hundred high-tech companies since the 1980s.
• The RAD Group has yearly revenue of over $1.3 billion and currently comprises 10 companies.
• Radiflow solutions are deployed in over 3,000 sites.
• iSID is typically deployed passively via access to a mirror port on a central network switch.
• The Insights risk model covers over 60 different attack types.
• iSAP Smart Collectors discard non-SCADA traffic, compress relevant data, and send it to a central iSID over an encrypted tunnel.
• iCEN provides centralized visibility, posture views, and management of rules and threat updates across multiple iSID deployments.
• iSEC ICS Security Assessment analyzes network activity for 2–4 weeks and delivers an executive summary plus a technical report and mitigation plan.

Notable Quotes

• “Today, potential impacts of purely IT-related risks for ICS systems are no longer limited to productivity or financial losses; they can cause massive disruptions of manufacturing processes, equipment problems or even large-scale catastrophes.”
• “The biggest challenge for OT security specialists is no longer just to detect every potential threat in their networks, but not to get buried under a huge number of them.”
• “Traditional passive intrusion detection systems favored by OT specialists for decades are no longer enough to meet these challenges.”
• “The functional scope of next-generation ICS/SCADA security solutions will be defined by intelligent risk management.”
• “iSID aims to reduce the strain on security analysts by performing automatic risk evaluation of each detected threat.”
• “With its AI-powered risk analytics module, Radiflow promises to make this process fully automated and continuous.”
• “These probes are engineered to ensure that their data transmissions are fully unidirectional, meaning that they cannot be exploited for unauthorized access to a remote network.”
• “Deployed on the edge of a remote industrial network, iSEG not only provides an encrypted communications channel over fiber or cellular interfaces but performs continuous deep packet inspection of all SCADA traffic.”
• “When any malicious anomaly is detected, the gateway can generate alerts, block the activity automatically or completely isolate any affected subnet.”
• “Customers are provided both with an executive summary for the management and a comprehensive technical report with all findings and an actionable mitigation plan.”