Frenos AI Simulated OT Penetration Testing Platform

Frenos, Inc. is a Delaware-registered company based in Charlotte, North Carolina, founded by OT security practitioners Brian Proctor, Harry Thomas and Eric Profittlich. It addresses the problem that live penetration testing is too risky for industrial control networks, so most OT operators rarely test how an attacker could reach their critical systems.

The platform builds an on-premises digital twin of the OT network from data customers already hold, such as Palo Alto, Cisco, Fortinet and Check Point firewall configurations, routing tables and Tenable or Rapid7 vulnerability findings, without new sensors or active scanning. It runs millions of attack path simulations from assumed-breach footholds to customer-defined crown jewels, emulates named threat actors, and its AI agent SAIRA ranks remediation and segmentation recommendations by risk reduction. Users are utilities, manufacturers, government and healthcare operators.

• OT digital twin: Builds a network replica from firewall configs, routing tables and vulnerability data.
• Attack path analysis: Simulates routes from assumed-breach footholds to defined crown jewels.
• Threat actor emulation: Models groups such as Volt Typhoon and Sandworm from OSINT feeds.
• SAIRA AI agent: Turns simulation results into prioritised recommendations.
• Segmentation guidance: Shows blast radius and suggests macro and micro segmentation.
• Air-gapped deployment: Runs on a laptop, on-prem server or customer cloud without internet access.

A Vietnamese power generation company can test whether an IT breach could reach its plant control systems without disrupting production. A manufacturer can validate segmentation between office and factory networks before an IEC 62443 audit. A water utility can prioritise firewall rule changes by the attack paths they close.

OT teams can test attack paths without touching live control systems, since all simulation runs on a digital twin. Remediation is ranked by how much risk and how many attack paths each fix removes. At S4x26 the platform ran 154,000 attack path simulations in about 17 minutes, and one customer reports replacing six weeks of consultant time with two hours of simulated testing. All AI models and data stay on premises.

State-backed groups are pre-positioning in power, water and manufacturing networks, and regulators push operators to validate OT segmentation rather than rely on paper assessments. In Vietnam and Southeast Asia, utilities and industrial parks expanding automation often lack OT penetration testing capacity, which favours safe, simulation-based testing.

Frenos, Inc. is registered in Delaware with a registered office in Charlotte, North Carolina. Total funding reached 6.4 million USD after a 1.52 million USD seed extension led by Momenta and Exposition Ventures in July 2026. Received 1.1 million USD from the US DOE CESER and was named a Gartner Cool Vendor in 2026.