Leading cybersecurity adopters and providers in power

Cybersecurity should be a key concern for all companies in the energy sector, but who are the companies making their mark within the cybersecurity theme? Here we look at some of the companies currently leading the way in deploying cybersecurity solutions and the specialist vendors of such solutions to the sector.

Duke Energy, US 

Duke Energy is an integrated energy utility in the US and has implemented cybersecurity measures and built layers of security to provide rapid detection and response to possible cyberattacks. Duke Energy is making its electric grid more secure so that it can withstand and protect against the growing threats of cyber-attacks. With multiple layers of security, company experts can quickly identify threats, protect essential systems and equipment, and properly isolate any impacted devices or systems. 

EnBW, Germany  

EnBW is one of Germany’s largest utilities and benefits from being able to draw on the services of its 100% owned subsidiary, EnBW Cyber Security. Among other products, EnBW Cyber Security offers solutions in network detection and response, as well as a managed security monitoring service, to protect the IT and OT infrastructure of its parent company and other players in the energy sector from cyberattacks, extortion, and industrial espionage. 

EnBW Group also acquired a stake in Narrowin, a Swiss cybersecurity start-up, in 2024. Narrowin’s digital twin technology replicates network infrastructure to make it easier both to visualize the network and consequently to determine the appropriate measures to be taken in response to an attack.  

Engie, France  

Engie is a major French electric utility. Engie Group, through ENGIE Laborelec, which is the company’s utility research division, carries out cybersecurity assessments across all types of IoT devices along with embedded systems, and its major emphasis is on devices and systems that are utilized in industrial environments. 

ENGIE Laborelec has also partnered with Tata Consultancy Services (TCS), to jointly develop cybersecurity products and services for the utilities sector, helping it to deal with new cybersecurity attacks in the area of industrial cybersecurity. 

Iberdrola, Spain  

Iberdrola is Spain’s largest energy company and one of the biggest in the world. In recent years, Iberdrola has made a considerable investment in digitization efforts and the smart grid, and this has made cybersecurity a prime concern for the company.  

In December 2019, the company joined the European Network for Cyber Security (ENCS) as its latest member, to help with ENCS’s work to boost the energy industry’s cyber defenses. This membership is helping Iberdrola reap the benefits of ENCS’ knowledge base along with training activities or events, while it contributes its own competence to boost the protection of their shared critical infrastructure. 

Siemens, Germany  

Siemens has a track record of in-house cybersecurity innovation. In 2021, the company developed Eos.ii, which is an AI-based monitoring and detection platform aimed at stopping cyberattacks on IoT devices. The platform allows SOC analysts to actively hunt for intrusions and allows Siemens’ analysts to monitor and detect cyber intrusions on both physical and digital assets, including operational technology.  

The company is investing heavily in cybersecurity and has even developed, with the help of public and private partners, a funded Industrial Cybersecurity Apprenticeship Program to develop the next generation of cyber-defenders to protect utilities companies and critical infrastructure. 

Bitdefender, Romania  

Bitdefender is a Romanian company with a joint HQ in the US, focusing on threat prevention, detection, and solutions. It has existed since 2001 and is a veteran of specialized cybersecurity solutions. The company has a technology alliance with VMware, Netgear, and Microsoft, along with several others.  

Bitdefender specializes in the energy and utilities sector among others. It has three main products that it offers to utilities companies. They are cloud and server security, GravityZone Security for Workstations (which uses machine learning to block threats), and GravityZone for business security, which provides cross-endpoint correlation to increase the visibility of cyberattacks, especially concerning attacks to endpoint security. 

Claroty, US  

Claroty offers industrial control systems security solutions to utilities companies and works with some of the world’s biggest power companies including Siemens and Schneider Electric. Its Claroty Platform features a Continuous Threat Detection control system and, like its competitors, the company focuses on IoT but also OT assets. Claroty also offers another cybersecurity solution called Claroty Edge, an edge data collector that gives energy companies visibility into their inventory of OT, IoT, and IT assets without any network changes or hardware deployments. 

Rhebo, Germany  

Rhebo works with companies in the energy, manufacturing, automotive, pharmaceutical, oil & gas, and food and drink sectors. Its products offer threat detection for operational technology and IIoT assets, including real-time visibility, as well as integrated solutions for IoT assets. The company also offers expert support for cybersecurity issues and cyber-risk assessments. The company works with Siemens, Schneider Electric, and Mitsubishi Electric, but also with some technology companies such as Honeywell, Rockwell Automation, and IBM. 

Nozomi Networks, US  

Nozomi Networks is a specialist cybersecurity vendor that works with numerous power companies, including five of the top 10 utilities companies such as Enel, and GE Power. Enel operates Nozomi Networks technology on over 300 electric distribution sites and more than 500 hydro-generation plants. The company focuses on securing operational technology and IoT devices, the latter being often overlooked as a cybersecurity threat by companies in the energy sector. The company’s Remote Collectors technology even allows for data to be captured from remote or off-site locations, which are extremely common for utilities companies.  

The company has also partnered with Google Cloud and IBM Security, to extend the reach of its products.