Bring the plant floor into the enterprise without compromising OT safety. Link OT Bridge speaks industrial protocols and exposes normalized events to iShield One Manufacturing/EAM and Nexus Security Operations under strict Purdue-zone controls.
Core capabilities
Industrial protocols
OPC-UA, MQTT, Modbus, EtherNet/IP, OSIsoft PI.
Purdue zoning
Unidirectional gateways, DMZ patterns, no direct OT egress.
Edge runtime
Lightweight runtime for plant-floor deployment with store-and-forward.
Normalization
Tag dictionary, units, calibration, hierarchical asset model.
Modules included across iShield
This solution is not a single module — it composes capabilities from across Nexus, Connect, One, Link and iShieldGRC to deliver the outcome.
OT telemetry without ERP context is noise; ERP without OT signal is blind. Link normalises protocols, One consumes the events as MES/EAM transactions, and Nexus SecOps enforces Purdue zoning so the bridge stays safe.
Reference data flow across iShield
A single record moves across iShield Nexus, Link, One and Connect — with GRC evidence captured at every step.
Captures the request, ticket, asset or risk record in the workflow engine and CMDB.
AI agents enrich, score and route the record under residency, PII and approval guardrails.
Financial, procurement or supply-chain impact is posted to the system of record in iShield One.
Outcome, SLA and KPI are written back so dashboards and reporting reflect closed-loop reality.
Regulatory & framework coverage
Out-of-the-box control mappings managed by the iShield Nexus Risk & Compliance (GRC) module.
Personas served
Pre-built integrations
Ship in weeks, not months. Every integration runs through iShield Link with residency, PII and consent guardrails.
LLM providers
- OpenAI
- Anthropic
- Azure OpenAI
- Mistral
- AWS Bedrock
- On-prem (vLLM, Ollama)
Data platforms
- Snowflake
- Databricks
- BigQuery
- Redshift
- Postgres
- S3
Message / Event
- Kafka
- AMQP
- Azure Event Hubs
- AWS Kinesis
- MQTT
EDI / B2B
- EDIFACT
- ANSI X12
- AS2
- SFTP
- PEPPOL
30 / 60 / 90-day value plan
A phased rollout with measurable outcomes at each checkpoint.
Days 0–30 — Foundation
Stand up the iShield workspace, integrate sources of truth, ingest baseline data.
- Tenant provisioned in chosen region (KSA / UAE / EU / US)
- SSO + RBAC mapped to enterprise identity (Entra ID / Okta)
- Top 5 integrations connected and reconciled
- Baseline KPIs measured before any change
Days 31–60 — Activation
Turn on automation, AI agents and guardrails for the priority value stream.
- Workflows live for the top 3 use cases
- Link AI agents enabled with explicit guardrails and approvals
- Power-user enablement and admin training complete
- First measurable KPI improvement vs baseline
Days 61–90 — Scale
Industrialize, roll out to additional teams, prove ROI to the steering committee.
- Solution rolled out to additional business units / geos
- Executive dashboard with target vs actual outcomes
- Continuous improvement backlog established
- Signed ROI memo and renewal / expansion plan
Deployment models & data residency
iShield Cloud (SaaS)
Multi-tenant SaaS managed by iShield, monthly release train.
Sovereign Cloud
Single-tenant deployment in regulated regions with in-country data residency and key custody.
Private Cloud / BYOC
Customer-owned AWS, Azure, GCP or OCI tenancy — iShield-managed control plane.
On-Prem / Air-gapped
Fully disconnected install for OT, defense and classified workloads.
Industry-tuned use cases
OPC-UA + OSIsoft PI normalisation into EAM and SOC with API 1164 unidirectional gateways.
SCADA telemetry into ERP work orders with Purdue zoning enforced at the Link edge runtime.
Modbus / EtherNet/IP tag normalisation feeding MES, EAM and quality without direct OT egress.
Building management + transport telemetry into one asset model with NCA OTCC-1:2022 alignment.
How iShield wins this category
Sovereign-cloud deployment in KSA and UAE with NCA-aligned key custody — no Azure-region workaround required.
Workflow-first composable model — no multi-year re-implementation to change a process.
One platform across CRM, ITSM, GRC and ERP — no per-cloud licensing stack.
iShield Link enforces residency, PII and consent across products so guardrails are systemic, not per-tool.
Related Platform & AI solutions
API, Integration & Event Platform
API gateway, iPaaS, event bus, connectors and EDI on one sovereign runtime.
OpenMulti-Tenant SaaS Enablement
Tenant lifecycle, isolation, metering, entitlements and per-tenant residency for SaaS builders.
OpenSovereign AI Gateway & Agent Governance
Governed LLM access, agent orchestration, prompt firewall and human-in-the-loop approvals.
Open