About

Listen before touching.

A small engineering company in Ottawa that works on the operational side of the network, where a mistake stops a line rather than costing an afternoon.

An open-plan engineering office, with three people working at a
                    shared table between rows of desks.
How we work

The plant sets the pace, not the calendar.

Most security advice is written for IT. It assumes you can patch on a Tuesday, reboot when you feel like it, and that the worst case is a lost afternoon.

Control networks do not work like that. A controller gets a maintenance window twice a year if you are lucky. An active scan pointed at the wrong device can fault it, and faulting it is not a ticket, it is a stopped line. The engineer who commissioned the cell has long since moved on, and the only surviving documentation is a laminated drawing taped inside the panel door.

So we work the way the plant works. Passive collection while the process is live; active work on a bench, or inside a window that was already booked for something else. We would rather spend a week on a mirror port than take a production risk to save ourselves a day.

The other half of the job is writing things down. Segmentation that nobody documented decays into a flat network within about two site visits, so every rule we put in gets a reason next to it. Whoever inherits the estate should be able to tell a decision from an accident.

And where we are the wrong people for a job, we say so. That costs us a project occasionally and it has never once cost us a client.

The name

Arta means truth, and right order.

Arta means truth and right order; its opposite, druj, is the lie. It is Old Persian, and the Avestan form of the same idea is asha.

We kept the name because integrity is the I in the CIA triad, and nearly every attack is a lie told to a machine: a spoofed certificate, a forged identity, a setpoint that is not what the operator believes it is. The three darts in the mark stand for the threefold code the word belongs to — good thoughts, good words, good deeds — converging on one point.

Company

The plain facts.

Legal name
Arta Cyber Inc., incorporated in Ontario, Canada.
Based in
Ottawa, Ontario. We travel to site; most assessment work needs somebody standing in the room.
What we do
OT and ICS security, penetration testing, network design, integration, custom software, hardware supply, and a 24×7 SOC and NOC.
Next

If we are the wrong people, we will say so.

Describe the site, the problem, and the deadline if there is one. Where we cannot help we will point you at someone who can.