Walk into the audit already prepared.
Lanterna Tech unifies your IT and OT posture — the IEC 62443 + NIST CSF 2.0 assessment, critical EOL tracking and an integrity-verifiable SHA-256 evidence trail. Compliance stops being an 18-month sprint.
106
NIST CSF 2.0 subcategories assessed, with the SP 800-82 OT overlay
5
Verifiable security controls (KMS encryption, IP allow-lists, SSO, 2FA, SHA-256 audit)
SL-1→4
IEC 62443 levels supported for your OT/ICS zones
Where today’s tools stop
You need one accountable picture.
You get three blind spots.
You need a trail — Excel gives you copies
Three shared files, two versions of the truth, zero auditability — and an auditor who wants to see exactly what changed.
You need an owner per asset — the lifecycle has none
End of support, contract, renewal: each step lives in a different tool and nobody owns the whole. Obsolescence debt piles up without anyone deciding it.
You need foresight — IT tools give you hindsight
Purdue zones, IEC 62443 SL levels and off-domain assets stay invisible, so OT risk only shows up after the incident.
What Lanterna Tech changes
Continuous posture, auditable evidence, OT included.
Your controls, your assets, your supplier campaigns and your evidence all live together. The auditor receives a dated dossier before they even ask.
IEC 62443 + NIST CSF 2.0 assessment
Self-assessment and supply-chain risk in one engine — both frameworks. Continuous score, gap per requirement, remediation linked to initiatives.
Supply chain map
Map every asset to its suppliers, see the criticality blast-radius, and spot who supplies your most sensitive equipment.
OT mapped
Integrated Purdue model, zones / conduits, industrial suppliers with automated cyber-questionnaire campaigns.
EOL & CVE detected
endoflife.date scanner + CISA ICS-CERT sync. End-of-life items surface in the catalog; turn them into a tracked initiative in two clicks, with owner and deadline.
Per-tenant KMS encryption
AES-256-GCM per tenant, KMS-wrapped envelope DEK. Integrity-verifiable SHA-256 audit hash chain.
Pricing
OT and compliance built in.
No separate module. No add-on. IEC 62443, NIST CSF 2.0 and the datacenter compliance matrix are included in Enterprise — not an upsell.
Professional
$350 / month (USD)
- 15 users · 750 assets
- Automatic EOL lookup (endoflife.date + CISA)
- Per-tenant KMS envelope encryption (AES-256-GCM)
- SHA-256 audit trail
- Scoped API keys (read / write / admin)
Enterprise
$650 / month (USD)
- 50 users · 1,500 assets
- + Datacenter compliance matrix (11 frameworks)
- + SSO (Entra / OIDC)
- + IP allow-list + SHA-256 audit chain
- + Jira / ServiceNow integrations
Enterprise OT
Custom
- Everything in Enterprise
- + Purdue model, zones and conduits
- + Industrial OT domain, exclusive to this tier
- + Unlimited users, initiatives and assets
- + Dedicated OT support
Audit in 6 weeks?
Be ready before the request
Demo focused on audit evidence. We show you how to generate an IEC 62443 self-assessment dossier and an export of your controls in 5 minutes.