Summary
- Palindrome Technologies has joined the ISASecure program, which certifies industrial cybersecurity.
- The company is working to become an accredited certification body for industrial automation and control systems (IACS).
- ISASecure is a certification program run by the International Society of Automation (ISA).
- The move is aimed at improving the cyber resilience of critical infrastructure.
- Industrial cybersecurity matters more as factories and utilities connect more of their equipment.
Introduction to Industrial Cybersecurity
Industrial systems are more connected than ever. That brings efficiency. It also brings risk. Sophisticated attackers now target factories and utilities. In April 2025, the International Society of Automation (ISA) announced that Palindrome Technologies had joined its ISASecure program. The company is working to become an accredited certification body that tests industrial products and systems against the ISA/IEC 62443 standards, a process that requires formal accreditation under ISO/IEC 17065 before it can issue certificates.
Driving Force Behind the Partnership
As industries add more automated and connected equipment, the attack surface grows. Palindrome Technologies, a security research firm and testing lab founded in 2005, says its experience testing 5G and IoT technologies carries over naturally to industrial systems. Joining ISASecure lets it apply that experience to certification work.
ISASecure, run by the International Society of Automation (ISA), is a well-known benchmark for industrial cybersecurity certification. It checks that automation and control systems meet the ISA/IEC 62443 standards. Palindrome plans to certify against two of its schemes: Security Development Lifecycle Assurance (SDLA), which covers how vendors build products, and System Security Assurance (SSA), which covers complete systems.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
The Role of ISASecure
ISASecure certifies that products and supplier practices meet strict security requirements. That gives buyers some confidence. Its certifications cover individual components and whole systems, plus the development process behind them. A larger pool of certification bodies, including Palindrome, should make it easier for vendors to get certified.
Enhancing Cyber Resilience
Palindrome brings a background in applied security research and testing. Its founders previously worked in Bellcore’s Security & Fraud group. As industries digitize, the need for resilient systems keeps growing, and independent testing helps make sure those systems can respond to and recover from incidents.
Key Players and Their Perspectives
Partnerships like this are common in industrial security. Vendors and testers have to work with standards bodies. CEO Peter Thermos said the company looks forward to playing a key role in certifying technologies that power critical infrastructure.
The partnership aligns with ISASecure’s overarching goal to create a safer industrial world through enhanced cybersecurity measures.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
A Call for Action in the Industry
Industrial systems remain exposed, and more independent certification is good news for the companies that run them. Other industry players should take note and push their suppliers to prove their products meet recognized standards.
Palindrome’s entry into the ISASecure program is a small but useful step for industrial cybersecurity. It shows how testing firms and standards bodies can work together to raise the bar. As industries adopt new technology, efforts like this help build a safer industrial future.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.