Map the network. Passively

StealthRecon

See the whole network in an afternoon.

Passive OT discovery on a handheld tablet. Walk in, plug into a TAP, and walk out with the inventory, the map, and the packet record — no specialists, no network changes, under $15k to start.

Most critical sites run blind. Discovery is where OT security stalls — the tools cost six figures, need specialists, and assume a network you can change. So the first question, "what's even on the network?", never gets answered. StealthRecon answers it in a single visit, and hands you the data to act on.

What you walk away with from one capture

Asset inventory

Every device, manufacturer, and role on the network.

.xls / .json

Network map

Segments, subnets, IPs, MACs, flows, and connections.

.svg

Protocols and ports

Top protocols, busiest ports, amount of traffic encrypted.

report

Enriched data

Filter and hunt the full dataset in your own tools.

.json / .xls

Raw PCAP

The original capture for your SIEM or analytics stack.

.pcap

Five clicks to a capture. The data does the rest.

Score a site, not just scan it

Pick a framework, choose the facility, and answer a guided questionnaire. StealthControl scores it and produces a report — and the capture data and map satisfy much of the evidence on their own.

How it works

  • 1. Connect: Plug into a network TAP or SPAN port with the dual-ethernet adapter.

  • 2. Configure: Five clicks. Capture for up to 24 hours, or schedule it for later.

  • 3. Capture: Listens only — 0 packets injected. OT protocols and TCP/IP alike.

  • 4. Report: The inventory, map, and reports build on the device. Export when ready.


Where teams use it

Network discovery ⋅ Site assessment ⋅ Flow mapping ⋅ Quick packet capture ⋅ Boundary & firewall checks ⋅ IT/OT convergence & leakage ⋅ Device replacement validation ⋅ Incident-response baseline