CyberOwl Medulla Maritime OT Cyber Monitoring

CyberOwl provides cybersecurity analytics for operational assets, mainly ships and critical national infrastructure. It has a registered address in London and an office in Singapore, and its technology builds on research that started at the Defence Academy of the United Kingdom and was completed at Coventry University. It helps shipowners and managers see and manage cyber risk on remote vessels with limited connectivity.

Medulla is a monitoring and analytics system that the crew can install on board with plug-and-play equipment. It analyses protocols, network traffic, host logs and operational logs to give early warnings of attacks on onboard IT, IoT and OT systems, ranks them by asset criticality, detects insecure crew behaviour and verifies that security controls work. Data is compressed locally for low-bandwidth satellite links. Managed services and advisory work on assessments and compliance complement the product.

• Fleet visibility: Shows onboard cyber risk across all vessels in real time.
• Early attack warning: Analyses protocols, traffic and logs and ranks alerts by asset criticality.
• Insider threat management: Detects accidental and intentional insecure behaviour on board.
• Controls verification: Provides evidence that security policies are implemented and working.
• Compliance automation: Standardises cyber audit reporting aligned with IMO 2021.
• Plug-and-play install: Crew self-install with local data compression for satellite links.

A Vietnamese container or tanker operator can monitor onboard IT and OT networks across its fleet from a shore office. A ship management company can prepare evidence for IMO 2021 and charterer cyber audits. An offshore energy contractor can detect insecure crew devices connected to vessel networks.

Fleet managers get one view of cyber risk across vessels without sending engineers on board, since the crew can install the system. Alerts are ranked by asset criticality so small shore teams focus on what matters. Local compression keeps monitoring running over low-bandwidth or interrupted links. Automated controls verification and audit reporting reduce the effort of preparing for IMO 2021 cyber risk inspections.

Ships carry more connected navigation, engine and cargo systems, and ransomware against shipping firms has grown sharply. IMO and class society rules now require cyber risk management on board. Southeast Asia hosts major shipping hubs and fleets, and Vietnamese shipowners serving international routes face the same inspection and charterer requirements.

Registered address in London with an office in Singapore; took part in the Techstars maritime accelerator in Singapore and worked with the UK NCSC on Medulla. Received an Innovate UK grant. Russell Kempley became CEO in September 2026, succeeding co-founder Daniel Ng. Engaged with over 100 shipowners and managers.