Learns normal machine-network behaviour in electronics factories and flags intrusions before lines stop
Mid-size electronics and component factories run hundreds of PLCs, SCADA servers and engineering laptops on flat networks built years ago, often with unpatched operating systems still on the line. Ransomware that reaches the factory floor can stop production for days, yet a typical plant has one IT person and nobody watching machine traffic. Existing OT monitoring tools are priced and staffed for refineries, not 300-person plants.
Linewarden is a passive sensor that plugs into a mirror port and learns each device's normal conversations over two weeks: which engineering station talks to which PLC, with which commands, at what times. It alerts on new devices, unusual write commands and lateral movement, explains each alert in Traditional Chinese or English, and suggests a containment step the plant team can take without stopping the line.
Electronics, component and precision-machining factories in Taiwan and Southeast Asia with 100–2,000 staff; Taiwan alone has more than 10,000 such plants, many facing new customer security audits.
Annual subscription per site based on monitored devices, from NT$600K a year for up to 300 devices, including sensor hardware and a monthly review call.
Lin Yu-TingCEO and co-founder
Chen Wei-HaoCTO and co-founder
Huang Pei-ShanHead of Threat ResearchIn the demo, the reflow oven alert walked from a VPN login to a firmware write in five readable steps. The team clearly thinks about what a plant can safely do at 2am. It is still a young product, and the reporting for multi-site groups is basic.
We had no idea which engineering laptops were talking to which PLCs until Linewarden mapped it in the first two weeks. The alert explanations are written for my team, not for a security analyst, and the suggested containment steps have never stopped a line. The audit pack saved us days during a customer security review.
Reply from Lin Yu-Ting, CEO
Acting without a security specialist is exactly what we designed the alerts for.
Large OT security vendors do not bother with 300-person plants, and those plants are exactly where supplier audits now bite. At NT$600K a year including hardware, the buying decision sits with a plant manager, not a board. Pei-Shan's incident response background gives the alert explanations real depth.
Plants I spoke to described the first month after install as noisy, with backup jobs and maintenance visits raising alerts almost daily. A 23% false positive rate is better than it was but still high for a one-person IT team. Several machines from Japanese makers used protocols the sensor could not decode, so those devices only got basic monitoring.
Reply from Lin Yu-Ting, CEO
Maintenance calendars are now imported during setup, which halves early alerts, and support for two of those protocols ships in Q1.
Coming soon. Testimonials are invited by the founder and shown separately from open reviews.
Coming soon. Follow Linewarden to hear about product and funding updates when this launches.
