What AmpyxCyber does

AmpyxCyber is a privately held industrial cybersecurity consulting firm operating in the OT/ICS security space since its founding in 2002. The company is structured as two independent legal entities — Ampere Industrial Security, Inc. in Oregon, USA and Ampyx Cyber GmbH in Hamburg, Germany (HRB 198836) — serving electric utilities and critical infrastructure operators across North America and Europe. Its core service is NERC CIP compliance advisory for electric utility asset owners, supplemented by a broader portfolio that includes gap assessments and mock audits, security program development, OT/ICS cybersecurity assessments, supply chain security, CIP-010 cyber vulnerability assessments, preparedness and resilience assessments, M&A cybersecurity due diligence, executive briefings, and incident response (ICDRT). A productized "RAPID OT" assessment positions a lower-cost entry point for industrial operators.

The firm differentiates itself through the operational background of its practitioners, who it states have served as utility staff, NERC CIP standards drafters, and federal auditors, and through stated 100% independence from vendor kickbacks, referral fees, or channel partnerships. The go-to-market is sales-led and direct: prospective clients request quotes or submit RFPs, with no public pricing, no self-service channels, and no disclosed products or software platforms. Marketing is thought-leadership driven, anchored by the Critical Assets Podcast (hosted by managing director Patrick Miller), a regulatory blog, executive briefings, and presence at industry events such as S4. Revenue is generated entirely through professional services fees for advisory, assessment, and training engagements under custom contracts.

The company has no disclosed outside funding, no parent company, no partnerships, and no subsidiaries. Its competitive positioning is built on multi-jurisdictional regulatory expertise (NERC CIP, NIS2, EU CRA) and a practitioner-led service model rather than on technology assets or platform IP.

Name

AmpyxCyber

Legal name

Ampere Industrial Security, Inc.

Website

https://ampyxcyber.com

Company type

Private

Founded year

2002

Operating status

Operating

Short description

AmpyxCyber is a privately held industrial cybersecurity consultancy founded in 2002, serving electric utility asset owners and critical infrastructure operators across North America and Europe with NERC CIP compliance, OT/ICS security assessments, incident response, and regulatory advisory services.

Ownership category

akta.pro rank

Product category

Industrial Cybersecurity Consulting

NAICS

Management Consulting Services (54161), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Enterprise Security Strategy & Program Advisory (BPAKADAA), Security Operations Center (SOC) as a Service (BPAEADAB)

Keywords

• Industrial cybersecurity consulting
• OT/ICS security services
• NERC CIP compliance
• Critical infrastructure security
• Regulatory advisory services

Headquarters

HQ city

Tallinn

HQ country

Estonia

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Professional Cybersecurity Consulting Services: Consulting engagements including NERC CIP compliance advisory, ICS security assessments, mock audits, program development, and regulatory policy analysis. Revenue derived from professional service fees for advisory, assessment, and training engagements with critical infrastructure organizations.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

AmpyxCyber provides expert-led industrial cybersecurity consulting for critical infrastructure asset owners, anchored in NERC CIP regulatory advisory for electric utilities and OT/ICS security assessment services. Engagements are custom-scoped and delivered through senior practitioners, and include gap assessments/mock audits, security program development, M&A cybersecurity due diligence, executive threat briefings, incident response (ICDRT), supply chain security, CIP-010 cyber vulnerability assessments, preparedness & resilience assessments, the streamlined RAPID OT security checkup, and professional training. The firm holds itself out as 100% independent, with no vendor kickbacks, referral fees, or channel partnerships.

Product overview

AmpyxCyber is a premier global industrial security consulting firm offering a comprehensive portfolio of advisory services rather than a unified software product. The core offering centers on NERC CIP compliance consulting for electric utilities, complemented by specialized services including Gap Assessments, Security Program Development, M&A Diligence, Executive Briefs, Incident Response (ICDRT), OT-ICS Security Assessments, Supply Chain Security, Cyber Vulnerability Assessments, and Preparedness & Resilience Assessments. The company also delivers the RAPID OT Assessment—a streamlined security checkup for industrial environments—and professional training programs. Content offerings include the Critical Assets Podcast (featuring Policy Pulse regulatory roundtables) and Ampyx News, which covers cybersecurity topics. The firm operates distinct US and German entities serving clients across North America and Europe, with expertise spanning since 2002 in the NERC CIP regulatory landscape.

Differentiator

Problem solved

Functional benefit

Products and services

• NERC CIP Services Comprehensive consulting services for NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) compliance, including standards interpretation, implementation support, and audit preparation for electric utility asset owners. Sold to compliance, security, and operations leadership at NERC-regulated electric utilities.
• Gap Assessment / Mock Audit Evaluates an organization's current security posture against regulatory requirements to identify gaps and prepare teams for actual NERC CIP or other compliance audits. Sold to compliance and security leadership at critical infrastructure operators.
• Security Program Development Designs and builds comprehensive cybersecurity programs tailored to industrial control systems and operational technology environments. Sold to OT/ICS security and compliance leaders at critical infrastructure operators.
• M&A Diligence Cybersecurity due diligence services for mergers and acquisitions, assessing the target company's security posture and regulatory compliance status pre-close. Sold to corporate development leaders and CISOs at utilities and critical infrastructure companies in deal processes.
• Executive Brief Strategic cybersecurity briefings for executive leadership, translating technical security issues and threat intelligence into business-risk language. Sold to C-suite and board-level audiences at critical infrastructure organizations.
• Incident Cyber Disaster Recovery Team (ICDRT) Incident response team providing expertise during cybersecurity incidents affecting industrial control systems and critical infrastructure. Sold to security and operations leadership at critical infrastructure operators needing managed incident response capability.
• OT/ICS Cybersecurity Assessment Security assessments specifically designed for operational technology and industrial control system environments. Sold to OT security leaders and plant/site operations leadership at industrial operators.
• Supply Chain Security Services to evaluate and manage cybersecurity risks in the supply chain for critical infrastructure operators, including third-party and vendor risk. Sold to procurement, OT security, and compliance leaders at critical infrastructure organizations.
• CIP-010 CVA (Cyber Vulnerability Assessment) Compliance-focused vulnerability assessments per NERC CIP-010 requirements for bulk electric system cyber systems. Sold to compliance and OT security leadership at NERC-regulated electric utilities.
• PRA (Preparedness and Resilience Assessment) Assessment services evaluating organizational preparedness and resilience capabilities for cybersecurity threats. Sold to security, risk, and resilience leadership at critical infrastructure operators.
• RAPID OT Assessment Low-cost, low-friction streamlined security checkup for industrial environments, providing a high-output, action-ready baseline of OT security posture with zero operational disruption. Sold as an entry-point engagement to OT security and operations leadership at industrial operators.
• Training Professional training programs for industrial cybersecurity, including NERC CIP certification preparation and OT/ICS security skills development. Sold to compliance and OT security teams at critical infrastructure operators.

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Claroty: Claroty provides OT/ICS cybersecurity software and services for critical infrastructure operators, including utilities. Comparable in target customer (electric utilities and critical infrastructure) and regulatory-driven use cases, with a more product-centric model.
• Dragos: Dragos is a leading OT/ICS cybersecurity company that combines a software platform with professional services for industrial asset owners. Overlaps directly with AmpyxCyber's NERC CIP and OT security assessment offering, though Dragos is more product-led and uses consulting as a layer around its platform.
• Nozomi Networks: Nozomi Networks offers OT and IoT security monitoring and assessment solutions widely deployed in electric utilities. Comparable customer base and regulatory framing, though more focused on visibility platforms than deep compliance advisory.
• TDi Technologies: TDi Technologies provides NERC CIP compliance and operational technology cybersecurity services to North American utilities. Closest direct peer to AmpyxCyber given the overlapping NERC CIP advisory focus and similar service-led model.

Broad incumbents

• Forescout Technologies: Forescout provides OT/ICS visibility and compliance solutions with associated professional services for asset owners. Comparable NERC CIP and OT security positioning, but predominantly a platform vendor with an attached services arm.
• Mandiant (Google Cloud): Mandiant provides incident response, threat intelligence, and OT/ICS security advisory, including capabilities overlapping with AmpyxCyber's ICDRT offering. A broad incumbent with industrial cyber as a specialized vertical within a larger services portfolio.
• Deloitte (Cyber & NERC CIP practice): Deloitte operates a large NERC CIP and industrial cybersecurity advisory practice within its broader consulting portfolio. Overlaps on NERC CIP compliance and OT security advisory but competes with AmpyxCyber as part of a much wider enterprise cyber and risk business.
• Accenture Security: Accenture Security delivers industrial cybersecurity, OT risk, and critical infrastructure protection services to global enterprises. Comparable in OT/ICS and compliance advisory scope, but positioned as a broad incumbent with industrial cyber as one of many focus areas.

Emerging players

• SecurityGate.io: SecurityGate.io provides OT/ICS cybersecurity assessment and management software for industrial environments. Competes in adjacent OT assessment workflows that overlap with AmpyxCyber's RAPID OT offering, but as an emerging software platform rather than consulting firm.
• Cybersecurity Advisory Services (NERC CIP boutique): Specialized NERC CIP compliance advisory firms serving North American electric utilities. Comparable service offering and customer base to AmpyxCyber but smaller scale and more limited geographic footprint.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key highlights6 records

Customer concentration

• Xx.com/ampyxcyber
• YouTubeyoutube.com/channel/UCVgvPIhl1JRSwMmf1tIjGgA
• Facebookfacebook.com/ampyxcyber
• LinkedInlinkedin.com/company/ampyx-cyber

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about AmpyxCyber