ICSEC
ICsec S.A. is a Polish cybersecurity software company that provides SCADvance XP, an AI/ML-powered intrusion detection system for industrial control networks, serving critical infrastructure operators in energy, gas, rail, mining, chemical, and manufacturing sectors across Poland and Central & Eastern Europe via direct sales and channel partners.
- Company typePrivate
- Founded2018
- HeadquartersPoznan, Poland
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What ICSEC does
ICsec S.A. is a privately-held Polish cybersecurity software company founded in 2018, headquartered in Poznań with a secondary office in Warsaw. The company specializes in protecting industrial control systems (OT/ICS networks) for critical infrastructure operators across energy, gas, water, rail, mining, chemical, and manufacturing sectors, primarily in Poland and Central & Eastern Europe. ICsec was the first company in Poland to obtain the ECSO "Cybersecurity Made In Europe" quality mark and is a founding member of the Polish Cybersecurity Cluster (#CyberMadeInPoland).
The company's flagship product, SCADvance XP, is a next-generation Intrusion Detection System for industrial networks that combines passive hardware probes (X1 sniffers with galvanic isolation) with AI/ML-driven behavioral analysis and deep packet inspection across a wide range of OT protocols (Modbus, Profibus, Profinet, DNP3, OPC UA, IEC-61850, and others). The system is independent from ICS control system manufacturers, integrates with SIEM and SOC environments, and supports compliance with Poland's KSC Act. Active R&D projects include the Active Query Module (AQM), CLOUD NFV virtual probe platform, and the SMUAP industrial automation monitoring system, supported by in-house Data Science and engineering teams operating from the SCADvance XP LAB, described as the largest industrial automation laboratory in Poland.
ICsec generates revenue primarily through multi-year enterprise software licenses for SCADvance XP, sales of X1 hardware probes, and professional services including implementation and integration via authorized integrators. The go-to-market model combines direct enterprise field sales (with 45-day proof-of-concept demos and engineering support) with a channel-led distribution approach anchored by Value-Added Distributor CLICO across Poland and CEE, complemented by participation in EU-funded EDIH programs for SME outreach. The company has raised approximately PLN 16 million in equity from three corporate venture capital investors (EEC Magenta, PGNiG Ventures, PKN Orlen VC) and secured substantial EU co-financing across multiple R&D and digital innovation hub projects.
ICSEC firmographics
Firmographics- Name
- ICSEC
- Legal name
- ICsec S.A.
- Website
- https://icsec.pl
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- ICsec S.A. is a Polish cybersecurity software company that provides SCADvance XP, an AI/ML-powered intrusion detection system for industrial control networks, serving critical infrastructure operators in energy, gas, rail, mining, chemical, and manufacturing sectors across Poland and Central & Eastern Europe via direct sales and channel partners.
- Ownership category
- akta.pro rank
ICSEC industry classification
Industry- Product category
- OT/ICS Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Integrated Systems Design (7373), Measuring & Controlling Devices, Nec (3829), Services-Computer Programming Services (7371)
- akta.pro primary industry
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
- akta.pro secondary industries
- Industrial Control System (ICS) & SCADA Security (HDADAJAA), OT Asset Discovery, Inventory & Vulnerability Management (HDADAJAE), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)
Keywords
Where ICSEC is headquartered
LocationHeadquarters
- HQ city
- Poznan
- HQ country
- Poland
- HQ region
- Europe
Offices3 records
Markets served
ICSEC business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Supply Chain, Operations
Revenue model
- SCADvance XP Software Licenses: The primary revenue stream is from licensing the SCADvance XP software platform, which includes the analytical server software, AI/ML detection engine, and management interfaces. Sold as an enterprise solution with flexible licensing options tailored to customer needs through authorized integrators.
- X1 Hardware Probes: Sale of hardware probes (X1 sniffers) that physically connect to industrial networks for passive traffic monitoring. Probes support multiple physical interfaces (Ethernet, RS-485, RS-232, RS-422, CAN) and are designed for installation in automation cabinets (DIN rail, 24V DC). Hardware includes proprietary firmware developed by ICsec.
- Professional Services & Implementation: Pre-sales proof of concept testing, system implementation, integration with SOC/SIEM environments, and post-sales support services provided through authorized integrators and the company's own engineering team. Technical support is available 9am–5pm.
- Training & Certification: Partner program includes access to training and certificates for authorized partners, integrators, and resellers, generating additional revenue streams.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Enterprise licensing with flexible options |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels9 records
ICSEC product offering
Product offeringCore offering
ICsec develops and sells SCADvance XP, a passive Intrusion Detection System for industrial automation (OT/ICS) networks, combined with proprietary X1 hardware probes for non-invasive traffic capture. The system uses AI/ML behavioral analysis and deep packet inspection to detect anomalies, cyber threats, zero-day attacks, and vulnerabilities across IT and OT protocols, serving critical infrastructure operators across energy, gas, water, transport, mining, chemical, and manufacturing sectors in Poland and Central & Eastern Europe.
Product overview
ICsec offers a unified cybersecurity ecosystem for industrial infrastructure with SCADvance XP as the core IDS product. The system combines passive hardware X1 probes with AI/ML-powered software analytics to monitor OT networks in real-time. Add-on modules include the AQM (Active Query Module) for enhanced device querying and the CLOUD NFV platform for virtual probe deployment. The company also operates the SCADvance XP LAB for testing and demonstrations, and has developed SMUAP as an R&D project for comprehensive industrial equipment monitoring.
Differentiator
Problem solved
Functional benefit
Brands
- Scadvance XP: Next generation IDS (Intrusion Detection System) for industrial networks providing monitoring, threat detection, and anomaly detection for OT (Operational Technology) networks using machine learning and AI.
- Scadvance XP LAB
- Cyberbezpieczne Wodociągi
Products and services
- SCADvance XP Next-generation Intrusion Detection System (IDS) for industrial automation (OT/ICS) networks. Combines AI/ML behavioral analysis, rule-based detection, and deep packet inspection to provide continuous monitoring, asset inventory, anomaly and cyber threat detection (including zero-day attacks), vulnerability identification, reporting, and SCADA system monitoring. Integrates with SIEM/SOC environments and supports KSC Act compliance.
- X1 hardware network probes Hardware probes for passive surveillance of OT network traffic without interfering with industrial infrastructure. Support Ethernet, RS-485, RS-232, RS-422, and CAN physical interfaces. Galvanically isolated from the monitored network, with Safe Boot, automatic firmware updates, PKI-based data transmission encryption, and tamper-detection (data deletion on unauthorized opening). Designed for DIN-rail installation in automation cabinets with 24V DC power.
- AQM (Active Query Module) Active querying add-on for SCADvance XP that performs periodic controlled polling of OT devices (PLCs, RTU, IEDs) to monitor firmware versions, hardware/software configuration, and current operational state, complementing passive monitoring with active device interrogation.
- CLOUD NFV (Cloud-based OT Cybersecurity Platform) Cloud-based OT cybersecurity platform utilizing NFV virtual probes to enable monitoring of OT networks in cloud and multi-tenant environments. Includes an improved analytics engine, DPI protocols for transport and mining industries, and an Expert Module.
- SMUAP (Industrial Automation Equipment Monitoring System) Comprehensive industrial automation equipment monitoring system combining hardware (Universal Network Sniffer) and software with an innovative analytical module. Automatically detects devices on the network, performs real-time vulnerability detection and firmware verification against CVE databases, and supports networks up to 10 Gbit.
- SCADvance XP LAB Industrial automation laboratory service where customers and partners can test cybersecurity solutions, examine industrial process parameters, conduct pre-testing, and experience SCADvance XP demonstrations in a flexible environment that supports further development with new elements.
- Cyberbezpieczne Wodociągi (Cybersecurity for Water Utilities) Dedicated program for cybersecurity of water utility operators, addressing OT monitoring, threat detection, and compliance needs for water intakes, treatment plants, and pumping stations.
Quantifiable outcome
- 100% event detection accuracy in wireless LTE-based OT network testing with Ericsson
- +3 more outcomes
Companies that use ICSEC
Customer profileNamed customers7 records
Segments7 records
Ideal customer profiles3 records
ICSEC technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability5 records
Feature7 records
ICSEC partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and minor.
- CLICOcoreICsec signed a distribution agreement with CLICO — the largest specialized Value-Added Distributor (VAD) on the Polish and Central & Eastern European markets. CLICO actively introduces the SCADvance XP solution for OT network monitoring, providing technical know-how, pre- and post-implementation support, training, and authorized certifications (CISSP). The agreement covers Poland and CEE countries.
- EricssoncoreStrategic collaboration to test SCADvance XP software in LTE/5G wireless industrial networks. ICsec and Ericsson conducted practical tests demonstrating that SCADvance XP operates effectively in wireless-based OT infrastructure with 100% event detection accuracy. Tests were performed in a lab simulating real industrial automation with LTE connectivity and simulated cyberattacks.
- Krakowski Park TechnologicznyminorKrakowski Park Technologiczny (KPT) is the coordinator of the hub4industry (h4i) EDIH project. ICsec participates as a service provider offering OT cybersecurity audits and trial deployments of SCADvance XP to manufacturing SMEs within the hub's ecosystem. KPT coordinates the project valued at PLN 25,878,347.92 with PLN 11,897,981.17 in EU co-financing.
- Łódzka Specjalna Strefa EkonomicznaminorŁódzka Specjalna Strefa Ekonomiczna is the coordinator of the re_d (Rethink Digital – Central Poland Digitalisation Hub) EDIH project. ICsec participates as a service provider in this EU-funded initiative targeting SMEs in digital transformation, including cybersecurity services. Project value: PLN 22,040,012.08 with EU contribution of PLN 20,164,646.27.
- Instytut Chemii Bioorganicznej PAN – Poznańskie Centrum Superkomputerowo-SiecioweminorThe Poznań Supercomputing and Networking Center (PSNC) of the Polish Academy of Sciences is the coordinator of the CyberSec EDIH project focused on cybersecurity for SMEs. ICsec participates as a service provider. Project value: PLN 14,625,417.09 with EU contribution of PLN 7,312,708.43.
- KGHM S.A.minorPilot implementation of SCADvance XP conducted under the IDEA Global accelerator program. KGHM, a major copper and silver producer, deployed ICsec's IDS solution for industrial network monitoring and anomaly detection.
- Es-SystemminorCollaboration under KPT Scale Up acceleration program to develop a solution for managing continuity of lighting systems. Es-System is a Polish lighting manufacturer.
- PKP EnergetykaminorCollaborative project under IndustryLABII accelerator with PKP Energetyka to develop a sniffer for the proprietary BUSZ protocol communication used in Polish rail power infrastructure.
- Ericsson (via StartupSPARK)minorProject under StartupSPARK accelerator with Ericsson to develop a solution for analyzing the quality of mobile network operation (3G/4G) for Industry 4.0 in real time.
Scale indicators13 records
Recent moves6 records
Expansion highlights6 records
ICSEC competitors and assessment
Company assessmentDirect peers
- Dragos: US-headquartered OT cybersecurity platform offering network monitoring, asset discovery, and threat detection for industrial control systems. Directly competes with SCADvance XP for enterprise OT IDS deals in Europe and serves the same critical infrastructure buyers.
- Nozomi Networks: Provider of OT/IoT security and visibility solutions with deep packet inspection and AI-based anomaly detection. Closest direct competitor to SCADvance XP in feature set and customer profile (energy, manufacturing, transport).
- Claroty: Industrial cybersecurity platform covering asset discovery, vulnerability management, and threat detection for OT/IoT/IIoT environments. Competes for the same critical-infrastructure RFPs as ICsec across energy, water, and manufacturing.
Emerging players
- Radiflow: Israel-based OT cybersecurity vendor focused on industrial network monitoring, threat detection, and IEC 62443 compliance. Comparable scale and product overlap with ICsec, with similar geographic concentration in EMEA.
- OTORIO: Israel-based OT security vendor offering risk-based asset management and threat detection for industrial environments. Comparable size and product focus to ICsec with overlap in European energy and manufacturing verticals.
- SIGA OT Solutions: Israel-based OT cybersecurity vendor specializing in anomaly detection for industrial control systems using signal-based monitoring. Comparable niche positioning to ICsec's SCADvance XP and competing for similar critical-infrastructure customers.
Broad incumbents
- Microsoft Defender for IoT (formerly CyberX): Microsoft's OT/IoT security offering providing agentless network monitoring and asset discovery. Broad incumbent competing on enterprise procurement leverage and bundling rather than on specialized Polish-protocol expertise.
- Cisco Cyber Vision: Cisco's OT visibility and security solution integrated with industrial networking gear. Competes for OT monitoring budgets at large enterprises, particularly where Cisco infrastructure is already deployed.
- Tenable OT Security (formerly Indegy): Tenable's OT security product combining asset discovery, vulnerability management, and threat detection. Broader portfolio incumbent leveraging Tenable's Nessus brand to cross-sell into industrial customers.
- Forescout: Network access control and device visibility platform with OT/IoT capabilities via the eyeSegment and SilentDefense products. Broad incumbent competing for enterprise-level OT visibility RFPs.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
ICSEC social profiles
Digital presenceICSEC compliance and trust
Trust signalCompliance1 record
ICSEC financial estimates
Financial estimateRevenue estimate
Valuation estimate
ICSEC leadership team
Management profileNumber of profiles
Profiles4 records
ICSEC funding detail
Funding detailFunding overview
Funding rounds7 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
ICSEC M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about ICSEC
What does ICSEC do?
ICsec develops and sells SCADvance XP, a passive Intrusion Detection System for industrial automation (OT/ICS) networks, combined with proprietary X1 hardware probes for non-invasive traffic capture. The system uses AI/ML behavioral analysis and deep packet inspection to detect anomalies, cyber threats, zero-day attacks, and vulnerabilities across IT and OT protocols, serving critical infrastructure operators across energy, gas, water, transport, mining, chemical, and manufacturing sectors in Poland and Central & Eastern Europe.
Is ICSEC a public or private company?
ICSEC is a private company. It is classified as venture growth investor backed and is currently operating.
When was ICSEC founded?
ICSEC was founded in 2018. It employs 11 to 50 people.
Where is ICSEC based?
ICSEC is headquartered in Poznan, Poland, in the Europe region.
How does ICSEC make money?
Four revenue lines are on record. SCADvance XP Software Licenses are the primary driver. The others are X1 Hardware Probes, professional Services & Implementation and training & Certification.
Who are ICSEC's main competitors?
Direct peers on record are Dragos, Nozomi Networks and Claroty. Emerging players are Radiflow, OTORIO and SIGA OT Solutions. Broad incumbents are Microsoft Defender for IoT (formerly CyberX), Cisco Cyber Vision, Tenable OT Security (formerly Indegy) and Forescout.
Does ICSEC have an API?
No public API is recorded for ICSEC.
What industry is ICSEC in?
ICSEC's product category is OT/ICS Cybersecurity Software. Its primary akta.pro industry code is HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS), with a secondary code of HDADAJAA, Industrial Control System (ICS) & SCADA Security. Its NAICS code is 54151 and its SIC code is 7373.