AGH delivers the full Kaspersky Industrial CyberSecurity (KICS) platform across HK + APAC — endpoint protection, network traffic analysis, and machine-learning anomaly detection for industrial automation. Air-gapped operation supported. Backed by Kaspersky ICS CERT, the first private CERT in industrial cybersecurity. Bilingual delivery by AGH, the certified channel partner.
Industrial control systems run 24/7, can't be patched on a Tuesday, and a single misconfigured signature can halt a production line or take a substation offline. IT security tools — antivirus with auto-update, active network scanning, agents that pull from the cloud — are often unusable on the OT floor. The threat actor knows this. That's exactly where they go.
of industrial organizations have experienced at least one OT cybersecurity incident. Source: Kaspersky ICS CERT survey.
average cost of a data breach in 2023 — and industrial incidents run longer to detect, with steeper downtime. Source: IBM Cost of a Data Breach Report 2023.
of Kaspersky MDR customers are from the Industrial sector — the single largest vertical. Source: Kaspersky MDR Analyst Report.
convergence is reshaping the attack surface. Air-gapped networks are no longer truly isolated — vendor remote access, contractor laptops, and IIoT sensors all create bridges. Visibility & correlation across IT and OT is now mandatory.
KICS is the OT-security platform with the deepest third-party validation track record — designed against the standards OT owners are required to comply with, and interoperability-tested with the automation vendors that run their plants.
KICS development process is certified against IEC 62443-4-1 — the international standard for industrial automation and control systems (IACS) product development. The same standard family that OT owners are required to align with across procurement and operations.
KICS operations are audited against SOC 2 Type 2 — covering security, availability, and confidentiality of the platform. Continuous-audit evidence, not a one-off snapshot, suitable for regulated customer procurement.
ISO/IEC 27001 information security management certification. Aligned with the information-security governance frameworks expected by financial, healthcare, and government buyers in HK + APAC.
KICS is interoperability-tested with more than 100 automation vendors — Siemens, Schneider, ABB, Honeywell, Emerson, Yokogawa, Rockwell, and others. The platform integrates with the SCADA / DCS / PLC stacks already running on your plant floor.
The KICS core is a Native XDR platform purpose-built for industrial automation and control systems. Each component is engineered for the OT context — passive detection by default, hardening for legacy endpoints, ML on telemetry rather than file inspection. Together they form a single investigation graph across nodes, networks, and process telemetry.
Hardened endpoint protection for Windows and Linux nodes — HMI, engineering workstation, historian server, vendor laptop. Application control, device control, integrity monitoring, and a portable scanner for maintenance of isolated or bring-in systems. Manual update mode supported; no cloud callback required.
Passive monitoring of East-West traffic inside the industrial network — SPAN / TAP at the switch, sensor on the engineering segment. Detects anomalies, insecure communications, and intrusion attempts long before disruption. Centralized risk and policy management across all IACS levels. Safe, vendor-approved vulnerability scanning — no risk of bringing down a plant.
Stands alone or integrates with KICS for Networks. Uses AI to analyze process telemetry and operator-action events. Combines diagnostic rules (for known fault signatures) with machine learning (for deviations from normal equipment behaviour). Detects equipment faults and human error long before they become critical — predictive maintenance, security, and safety in one model.
Most industrial customers operate more than one site — and increasingly, the threat extends beyond the cable. KICS extends to geographically distributed networks, drone airspace, and the IIoT edge, using the same Kaspersky security backbone.
A unified solution that ensures the reliability of distributed industrial networks. Easy scalability, cost optimization, centralized management, and centralized security. KICS for Nodes and KICS for Networks Sensors collect telemetry through the SD-WAN gateway, enabling centralized monitoring and protection of distributed industrial objects.
Reduces the likelihood of process stoppages at industrial enterprises by preventing unauthorized drones from entering the territory. Automatic airspace scanning, drone detection and classification using neural networks, remote drone neutralization. Friend-or-foe mode lets customers operate their own drones without intervention.
Secure data collection and transfer from equipment to digital and cloud platforms. Built on KasperskyOS — a secure-by-design microkernel — with cyber-immunity against most attack classes. Third-party app support with secure delivery, integration with cloud platforms and corporate business systems. Managed through Kaspersky Security Center (KSC), up to 100,000 endpoints per console.
Kaspersky ICS CERT is the first private CERT in industrial cybersecurity. Continuous research, telemetry collection, and vulnerability disclosure feed four streams of threat intelligence — three automated data feeds, and one human expert inquiry service. Coverage of APTs, crimeware, ICS-specific vulnerabilities, and region-specific threat landscape.
Real-time threat intelligence for ICS and other systems used in OT. Hashes Data Feed — known malware hashes for prevention, detection, and investigation. Vulnerability Data Feed — verified, refined data on vulnerabilities in ICS hardware / software, machine-readable. OVAL-format Feed — automated detection of known vulnerabilities in SCADA and other industrial software. Machine-readable, integrates with SIEM / XDR.
In-depth intelligence and awareness of malicious campaigns targeting industrial organizations. APT reports — new APT and high-volume attack campaigns. Vulnerability reports — vulnerabilities found in the most popular ICS products. Threat landscape reports — significant changes, regional / country / industry-specific exposure. Advisories — actionable mitigation recommendations from Kaspersky experts. Delivered via Kaspersky Threat Intelligence Portal or API.
Custom inquiry service for specific threats or vulnerabilities. Customers describe their threat or sample; Kaspersky ICS CERT responds with: description of threats, vulnerabilities, and IoCs; information about APTs and crimeware; malware analysis (static, dynamic, configuration extraction); threat analysis in the darknet. Personalized, contextual, with expert recommendations on response.
Kaspersky's expertise portfolio covers the full engagement lifecycle — pre-deployment assessment, continuous monitoring, and post-incident response. The same GReAT and ICS CERT personnel who research the latest threats are the ones you speak to during an incident.
A comprehensive approach to identifying vulnerabilities in industrial infrastructure. Network architecture and equipment audit, industrial solution / workstation / server configuration, devices and components review, attack simulation, White Box testing. Hardening guides and zero-day vulnerability findings delivered as a remediation roadmap.
Continuous hunting, detection, and elimination of threats targeting your industrial enterprise. Patented attack indicators track undetected threats inside the control system. Automated and guided response, with forensic investigation and malware analysis on demand. All the benefits of a SOC, without the cost of building one in-house. 22% of Kaspersky MDR customers are industrial — the single largest vertical.
Critical infrastructure incidents require the right expertise on-site. Incorrect response at industrial facilities can significantly amplify the damage. Kaspersky's Global Emergency Response Team provides: rapid elimination of incident consequences, analysis of causes / sources / consequences, and a detailed view of the malware used. Three service components — incident investigation and threat elimination, digital forensics, malware analysis — engaged as a single call-out.
AGH is the certified Kaspersky KICS channel partner for Hong Kong and APAC. We don't drop-ship licences — we deploy and operate programs. Our team scopes the environment, designs the sensor and endpoint placement, executes the integration, and operates the 24×7 monitoring service. Air-gapped, segmented, and hybrid deployments all supported.
Delivery is bilingual — English / Simplified / Traditional. Compliance documentation can be produced in formats suitable for HK regulatory submissions. SOC event records, vulnerability remediation evidence, and audit trails are stored in AGH's bilingual archive.
30 minutes with our team. We'll review your plant / network topology, current OT visibility, segmentation status, and compliance obligations — and propose a KICS deployment plan scoped to your environment. No commitment.
Book a Discovery Call