top of page
Engineering Blog for High Performance Insights


CRA for Industrial Protocols - A Critical Comparison
SECURITY BRIEF: CRA secure-by-default essential requirement through the lens of protocols that the device supports. Protocol security does not behave like a product property. Every industrial protocol that has added cryptographic protection — PROFINET Security Classes 2 and 3, CIP Security on EtherNet/IP, the OPC UA secure channel — protects a session, and a session needs two capable endpoints. The security a plant actually achieves is set by the least-capable peer in each re
Scott Ludwick
Sep 196 min read


i3X 1.0, Cyber Resilience Act, and the assurance gap in open industrial APIs
OT SECURITY BRIEF: We look into the security aspects of the recently introduced i3X 1.0 (Industrial Interoperability eXchange) In June 2026, CESMII froze version 1.0 of i3X — the Industrial Information Interoperability eXchange — and shipped it with an implementation guide, an OpenAPI definition, a Python client, a conformance test suite and an MCP server. Forty-four technology providers have publicly aligned behind it. The specification is small, MIT-licensed, and by severa
Scott Ludwick
Sep 1510 min read


IIoT Interoperability OPC UA vs MQTT
We discuss MQTT relative to OPC UA. Not equivalents - each brings its own strengths and weaknesses to the OT environment
Scott Ludwick
Sep 114 min read
bottom of page