OTAISAFETY
← Directory  /  SCADA/edge platforms

pnoker/iot-dc3

Open-source IIoT runtime with 36 protocol drivers and an MCP tool gateway.

ScoreInsufficient data
Unknown7/12
TypeOpen source
Last checked2026-10-16
12-point checklist
#CriterionCISAScoreEvidence
C1
Actuation capability
2 pts if: Cannot write/actuate, or writes are clearly isolated
P2, P40 · Absent / unsafe defaultread/write points, command execution
C2
Read-only by default
2 pts if: Write/method tools off unless explicitly enabled
P4UnknownNot documented publicly / not yet verified
C3
Write guardrails
2 pts if: Per-tag allowlist plus value/rate limits or interlock checks
P41 · Partialper-tool authorization
C4
Human-in-the-loop approval
2 pts if: Critical writes need explicit human confirmation
P4UnknownNot documented publicly / not yet verified
C5
Authentication
2 pts if: Authenticated sessions to the OT endpoint; no anonymous default
P3, P41 · Partial
C6
Encryption & cert verification
2 pts if: Encrypted transport with server certificate verification
P41 · PartialTLS mentioned
C7
Audit logging
2 pts if: Every agent call/write logged durably
P3, P42 · Verifiedfull audit trail claimed
C8
Network placement
2 pts if: On-prem/edge/air-gapped or push/DMZ flow; no inbound IT→OT path
P2, P4UnknownNot documented publicly / not yet verified
C9
Data leaving the site
2 pts if: No telemetry; plant data can stay on-prem
P2UnknownNot documented publicly / not yet verified
C10
Fail-safe & safety independence
2 pts if: Fails closed; safety systems stay independent
P4UnknownNot documented publicly / not yet verified
C11
Vendor security disclosure
2 pts if: Published security policy / PSIRT
P3UnknownNot documented publicly / not yet verified
C12
Supply-chain hygiene
2 pts if: Versioned/signed releases; pinned installs
P3UnknownNot documented publicly / not yet verified
Sources

Note: Largest project found, about 1.3k stars

Vendor or maintainer? Send corrections or documentation →