ByteLock GRC

A governance, risk and compliance platform purpose-built for OT. Structured around the Purdue levels, zones and asset classes your engineers already use, it keeps the register an accurate reflection of the plant.

One register for every site, risk and control.

ByteLock GRC is a governance, risk and compliance platform purpose-built for OT, delivered as a desktop application for Windows, macOS and Linux. IEC 62443-3-3 is included as standard, and national regulatory frameworks, ISO/IEC 27001 or internal standards can be imported. Every control is mapped to IEC 62443, NIST SP 800-82 and NERC CIP.

  • Asset inventory
  • Risk register
  • Control library
  • Incident log
  • Remediation tracker
  • Reports
Watch the product tour

Six modules, one source of truth.

Every module references the same assets and zones, so an assessment finding flows into a risk, a control gap and a remediation action without duplicate data entry.

Asset inventory

Catalogue PLCs, HMIs, SCADA and DCS servers and network devices by site, zone and Purdue level.

Risk register

Rate risks against your own likelihood and consequence matrix and track each treatment to closure.

Control library

One library of controls mapped to IEC 62443, NIST SP 800-82 and NERC CIP.

Incident log

Record OT security events and link them to the affected assets and risks.

Remediation tracker

Schedule remediation around shutdown windows with owners, due dates and evidence.

Reports

Management dashboards and audit-ready reports for regulators and certification bodies.

Frameworks mapped

  • ISA/IEC 62443
  • NIST SP 800-82
  • NERC CIP

Built for

  • Asset owners
  • OT security teams
  • Consultants and auditors

See it in action.

Take the guided tour or request a live demonstration. Licensed by annual subscription, with a 14-day free trial.

Watch the product tour