NovaiguNovaigu
Request a demo

Case studies

What changed when the platform went in

Three situations our customers faced and how Novaigu resolved them, and three recent industry attacks with how they would have gone with Novaigu in place.

Request a platform demoPlatform overview

Our customers

Three situations, resolved

Case 01

Day one

New assets found right away

Expansions and upgrades

  1. Trigger

    • New production units.
    • System upgrades and migrations.

  2. Challenge

    • Not enough staff or skills.
    • New systems interface with the existing environment.
    • Added complexity in the inventory and managed assets.
    • No visibility on site, while the new systems add risk.

  3. With Novaigu

    • Discovered the newly connected assets immediately.
    • Scanned and hardened the security configuration of each asset.
    • Classified and organized assets by use, functionality and criticality.
    • Ran a vulnerability assessment of security controls, user access, patching, antivirus and more.
    • Reported gaps and prioritized remediation by compliance, security lifecycle and maturity level.
    • Remediation (hardware, software and labor) could be contracted to Novaigu professional services.
Case 02

340K → 120K

Average cost a year

Regulatory compliance

  1. Trigger

    • New regulatory and compliance requirements.
    • A cybersecurity program to implement, with maturity assessed every year.
    • Three facilities in the US and Canada.

  2. Challenge

    • A large estate: 170 network devices, 340 systems and thousands of connected field devices per site.
    • Assets managed by the IT team.
    • Five specialized people and six months to complete the work.

  3. With Novaigu

    • Identified ICS/OT assets, defined ownership and accountability, and separated OT from IT assets.
    • Cut the effort, logistics and time to one week per site.
    • Assessed security controls against frameworks and standards, with a detailed, prioritized roadmap for the program.
    • No disruption to operators during the work.
    • Average cost reduced from 340K to 120K a year.
Case 03

23

Facilities brought onto one roadmap

Team backlog

  1. Trigger

    • An organization stuck in firefighting mode.
    • Spending that created new requirements and opened new attack vectors.

  2. Challenge

    • 23 facilities worldwide.
    • Inconsistent results between regions.
    • Different solutions on each site to mitigate the same threats.
    • New management with no visibility or history to base decisions on.

  3. With Novaigu

    • Identified the organization’s risk profile.
    • Discovered and assessed assets to set a cybersecurity baseline.
    • Put a cybersecurity maturity roadmap in place.

Recent industry attacks

How they would have gone with Novaigu

Three recent attacks from the public record: the challenge each one shows, what happened, and what Novaigu would have changed. These organizations are not Novaigu customers.

Utilities · April 2025
  1. Attackers reach the system that controls the water flow
  2. The outflow valve is set to open
  3. More than 7.2 million litres released

4 hours

Before the open valve was noticed

A dam valve opened from afar

The challengeControl systems that can be reached remotely, with no one watching what changes on them.

  1. What happened

    • Attackers took control of the digital system that controls the water flow at a dam in Bremanger, Norway, and set its outflow valve to open.
    • It took about four hours to notice and reverse, by which time more than 7.2 million litres of water had flowed through.
    • Norway's Police Security Service later attributed the attack to pro-Russian hackers.

  2. With Novaigu in place

    • The dam's control system, and the remote way into it, would have been on the asset inventory from the first day, with the exposure flagged as a risk to fix.
    • Configuration analysis would have measured the control system against hardening standards and listed every weak setting and unneeded service.
    • UDR's lockdown mode would have let the operator cut every remote path into the site at once, while one-way transfers kept data flowing out.

Source: BleepingComputer, August 2025·Utilities at Novaigu

Manufacturing · September 2025
  1. A cyberattack hits the business systems
  2. Systems are shut down and production paused
  3. About five weeks before the lines restart

£1.9bn

Estimated cost to the UK economy

Five weeks without a production line

The challengeA breach in business systems that forces every plant to stop.

  1. What happened

    • A cyberattack on Jaguar Land Rover at the end of August 2025 forced the carmaker to shut down its systems and pause production from 1 September.
    • Production stayed halted for about five weeks, and the disruption spread through its supply chain.
    • The Cyber Monitoring Centre estimated the cost to the UK economy at £1.9 billion, across more than 5,000 organizations, and called it the most economically damaging cyber event to hit the UK.

  2. With Novaigu in place

    • A secure architecture with segmentation built to industry standards would have kept the production networks apart from business IT, so a breach on one side need not stop the other.
    • An up-to-date inventory and configuration baseline of every plant asset would have shown what was untouched, so plants could restart from a known state.
    • Mission Control would have given leadership one read-only view of every plant while the incident was handled, and our response and recovery teams are ready 24/7.

Source: Infosecurity Magazine, October 2025·Manufacturing at Novaigu

Pharmaceuticals · May 2026
  1. The network is breached and data stolen
  2. Systems are encrypted and sites isolated
  3. Shipping, receiving and manufacturing disrupted

16 days

From breach to fully operational

Ransomware in the medicine supply chain

The challengeRansomware that reaches manufacturing, where every system has to come back to a known, validated state.

  1. What happened

    • Attackers breached West Pharmaceutical Services, one of the largest suppliers of components for injectable medicines, on 4 May 2026, encrypting systems and stealing data.
    • Systems used to ship, receive and manufacture products were affected, and operations were disrupted globally while the company isolated its on-premise infrastructure.
    • Manufacturing restarted site by site, and the company said it was fully operational again on 20 May.

  2. With Novaigu in place

    • Mission Guard would have held an inventory and configuration baseline of every production system, so each could be checked against a known-good state before it restarted.
    • Hardening and vulnerability management would have closed the gaps ransomware uses to move from enterprise systems into production.
    • The documents library would have kept the current policies, procedures and plans in one place for the response team, and UDR would have delivered patches and antivirus updates to every site over encrypted one-way channels.

Source: The Record, May 2026, Reuters, 20 May 2026·Pharmaceuticals at Novaigu

Facing something similar?

Tell us about your sites and what is in the way, and we will show you how the platform and our team would approach it.

Request a platform demoTalk to our team