SaiFlow

What SaiFlow does

SaiFlow is a privately held Israeli cybersecurity company founded in 2022 and headquartered in Tel Aviv, with a team of 9+ listed members operating within an 11–50 employee band. The company builds the Energy Runtime Security Platform, an AI-native SaaS solution that secures distributed energy resources — including EV charging infrastructure, battery energy storage systems (BESS), solar PV, wind turbines, smart meters, microgrids, and substations — against threats that span both the cyber and physical-energy domains. Its core differentiator is the fusion of energy telemetry (voltage, current, power flows) with network activity across energy-specific protocols (OCPP, OCPI, IEC 61850, Modbus, OpenADR) to deliver contextual threat detection that legacy IT/OT security tools cannot replicate.

The platform is composed of four primary modules — Contextual AI Threat Detection, Energy IoT Asset Visibility, Zero Trust Enforcement, and the AI-Powered Threat & Incident Assistant — supported by a Custom Detection Rules Engine and an OCPP Security Gateway. Detection events drive automated zero-trust policy generation inside the customer's existing next-generation firewall (NGFW) and SIEM via native integrations with Palo Alto Networks, Fortinet (Fabric-Ready Technology Alliance Partner), Check Point, CrowdStrike, and Claroty. SaiFlow's in-house security research team has published multiple CVE disclosures spanning ABB, XCharge, FIMER, and libmodbus, which functions as both a credibility signal and a content-marketing engine.

The business model is enterprise SaaS sold through direct field sales with quote-based pricing on annual contracts; the website uses 'Book a Demo' CTAs as the primary conversion mechanism, and the GTM relies heavily on co-marketing through the partner ecosystem. Primary customer segments are Charge Point Operators (CPOs), distributed energy resource (DER) operators, and energy utilities. SaiFlow reports no publicly disclosed institutional funding or revenue, and its only known capital-related event is non-equity participation in the AWS and CrowdStrike Cybersecurity Accelerator in February 2025, indicating an early-stage operating profile with limited financial visibility.

Name

SaiFlow

Legal name

SaiFlow

Website

https://saiflow.com

Company type

Private

Founded year

2022

Operating status

Operating

Headcount range

11–50 employees

Short description

SaiFlow is an Israel-based cybersecurity company that provides an AI-native Energy Runtime Security Platform for distributed energy networks, including EV charging infrastructure, BESS, solar, wind, smart meters, and microgrids. It fuses energy and network telemetry for contextual threat detection targeting CPOs, DER operators, and energy utilities.

Ownership category

akta.pro rank

Product category

Energy Cybersecurity (OT/ICS Security for Distributed Energy)

NAICS

Computer Systems Design and Related Services (54151)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

Managed OT Security Services (MSSP/MDR for ICS/OT) (HDADAJAN), Vulnerability & Patch Management for OT Assets (EUADANAF), Grid Cybersecurity Implementation & OT Security Services (EUAEANAG)

Keywords

• EV charging cybersecurity
• Distributed energy security
• Energy IoT visibility
• OT threat detection
• Zero trust enforcement

Headquarters

HQ city

Tel Aviv

HQ country

Israel

HQ region

Middle East

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel

Revenue model

1. SaaS Security Platform Subscription: AI-native cybersecurity platform delivered as SaaS subscription. Provides continuous monitoring, threat detection, asset visibility, and zero-trust enforcement for distributed energy networks. Pricing is quote-based, suggesting enterprise contract terms.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

SaiFlow sells an AI-native Energy Runtime Security Platform delivered as a SaaS subscription that secures distributed energy networks (EV charging stations, BESS, solar PV, wind turbines, smart meters, microgrids and substations). The platform uniquely fuses energy telemetry (power flows, voltage, current) with network activity across energy protocols (OCPP, OCPI, IEC 61850, Modbus, OpenADR) to provide contextual threat detection, energy IoT asset visibility, vulnerability and posture monitoring, AI-assisted incident investigation, and automated zero-trust enforcement via integrations with leading NGFW and OT security platforms.

Product overview

SaiFlow offers the Energy Runtime Security Platform, an AI-native SaaS cybersecurity solution for distributed energy networks. The platform integrates four core modules: Contextual AI Threat Detection (correlating power and network data for real-time anomaly detection), Energy IoT Asset Visibility (full asset discovery and vulnerability monitoring), Zero Trust Enforcement (automated NGFW policy generation), and the Threat & Incident Assistant (AI-powered investigation tool). The platform secures distributed energy resources including BESS, solar PV, wind turbines, EV charging stations, smart meters, and microgrids, supporting protocols such as OCPP, OCPI, IEC 61850, Modbus, and OpenADR.

Differentiator

Problem solved

Functional benefit

Products and services

• Energy Runtime Security Platform AI-native SaaS cybersecurity platform for distributed energy networks, providing contextual threat detection, energy IoT asset visibility, vulnerability and posture management, compliance scoring, AI-assisted investigation, and zero-trust enforcement for EV charging stations, BESS, solar PV, wind turbines, smart meters, microgrids and substations. Sold to enterprise operators of distributed energy infrastructure.

Quantifiable outcome

• MTTR reduced to under 40 seconds with AI-powered Threat & Incident Assistant
• +2 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability5 records

Feature5 records

Partnerships

Five partnerships are on record, tiered core.

• ClarotycoreTechnology or IntegrationSaiFlow and Claroty partnered to deliver comprehensive cybersecurity protection for distributed energy devices and sites. The partnership bridges deep OT visibility with real-time, energy-aware threat detection, combining Claroty's industrial cybersecurity expertise with SaiFlow's energy runtime security platform.
• CrowdStrikecoreTechnology or IntegrationSaiFlow and CrowdStrike partnered to deliver energy-contextual threat detection and unified SIEM visibility for EV charging and distributed energy networks. The joint solution combines SaiFlow's energy-aware monitoring with CrowdStrike's endpoint and SIEM capabilities.
• Palo Alto NetworkscoreTechnology or IntegrationSaiFlow and Palo Alto Networks partnered to integrate the SaiFlow Energy Runtime Security Platform with Palo Alto Networks OT Device Security solution and Next-Generation Firewall (NGFW). The integration provides contextual cybersecurity and dynamic protection for EV charging sites and distributed energy networks, including automated tailored firewall rules and zero-trust enforcement.
• FortinetcoreTechnology or IntegrationSaiFlow and Fortinet partnered to deliver unified cybersecurity solutions tailored for EV charging stations and distributed energy networks. The partnership combines SaiFlow's contextual, energy-aware anomaly detection with Fortinet's zero-trust network fabric and automated enforcement via FortiGate NGFW, FortiAnalyzer, and FortiManager. SaiFlow is a Fortinet Fabric-Ready Technology Alliance Partner.
• Check Point Software TechnologiescoreTechnology or IntegrationSaiFlow and Check Point partnered to secure EV charging sites and distributed energy networks. The partnership integrates SaiFlow's contextualized network visibility and monitoring with Check Point's Security Gateway prevention capabilities and IoT Protect solution to deliver full network protection, automated firewall policies, and unified alert management.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike: CrowdStrike is a broad cybersecurity incumbent offering endpoint protection and SIEM that overlaps with SaiFlow's energy-context threat detection integration. CrowdStrike's Falcon platform addresses the same SOC buyers evaluating energy-aware detection for distributed energy networks, and it is also a SaiFlow investor-partner (Accelerator).
• Fortinet: Fortinet is a broad cybersecurity incumbent offering FortiGate NGFW, FortiAnalyzer, and FortiManager with OT security capabilities relevant to SaiFlow's energy-context enforcement. Fortinet is a SaiFlow Fabric-Ready partner, positioning it simultaneously as enabler and competitor at the zero-trust enforcement layer.
• Palo Alto Networks (OT Security): Palo Alto Networks is a broad cybersecurity incumbent with an OT Security portfolio and NGFW that competes with SaiFlow at the platform layer, while also serving as a formal SaiFlow integration partner. Its OT Device Security solution overlaps with SaiFlow's EV charging and DER cybersecurity use cases as part of a wider portfolio.
• Check Point Software Technologies: Check Point is a broad cybersecurity incumbent offering Security Gateway and IoT Protect solutions relevant to OT and IoT security. Check Point is a SaiFlow integration partner while also competing at the network-level prevention layer for energy and EV charging customers.

Direct peers

• Dragos: Dragos is a direct peer focused on industrial cybersecurity for operational technology environments, with strong positioning in electric utility and energy infrastructure. Dragos addresses similar threat detection and asset visibility use cases across energy OT environments that SaiFlow targets.
• Claroty: Claroty is a direct peer specializing in OT/ICS cybersecurity for critical infrastructure, including energy utilities. Claroty is also a formal SaiFlow integration partner (bridging OT visibility with energy-aware threat detection), making it both a competitor and collaborator with overlapping customer sets in the energy and EV charging space.
• Armis: Armis provides asset visibility and security for unmanaged IoT and OT devices, including energy and building management systems. It competes with SaiFlow's Energy IoT Asset Visibility module for the same enterprise security buyers evaluating distributed energy asset security.
• Nozomi Networks: Nozomi Networks is a leading OT/IoT cybersecurity company with deep penetration in energy utilities and critical infrastructure. It competes directly with SaiFlow in securing distributed energy assets and grid-edge devices for the same charge point operators and utility customers.

Emerging players

• Cylera: Cylera is an early-stage OT security vendor originally focused on healthcare that has expanded into energy and other critical infrastructure segments. It provides asset visibility and threat detection for IoT/OT devices, partially overlapping with SaiFlow's energy-context detection capabilities.
• Opswat (formerly SCADAfence / OT segment): Opswat (which acquired SCADAfence) offers OT security platforms with energy and critical infrastructure coverage, overlapping with SaiFlow's threat detection and asset visibility capabilities for distributed energy and industrial networks. It targets similar utility and critical infrastructure buyers with a broader platform scope.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SaiFlow