OT pentest Purdue model zones with guardrails
How to Pentest OT Networks Without Halting Production
Oldsmar proved an intruder can move a plant setpoint from a browser tab. This is the safe method: passive-first discovery, read-only active testing, writes proven on clone benches, and findings ranked in downtime currency — not CVSS.