Brochures, threat advisories and research for renewable developers, operators and OEMs.
CAPA-TA-2026-003 — Credential-stealing malware is harvesting developer and DevOps accounts, then cloning and exfiltrating cloud source repositories at scale. A clear path from IT repositories into OT for energy operators.
An ARENA-funded review of CSIP-AUS — Australia's IEEE 2030.5 profile for DER-to-grid communication — setting out the risks large DER fleets pose to consumers and the power system, operational mitigations for CSIP-AUS clients and servers, and the improvements the standard needs as fleets scale toward ~10 GW of rooftop solar by 2030.
Design it right, prove it's compliant, and defend it in operation. Wind, solar and battery storage on a single platform.
One structured record of the site: zone-and-conduit architecture, every system and version deployed, and the boundaries between them. Built once at design, inherited by everything downstream.
Consequence-driven risk for renewables: a small set of High Consequence Events, the crown jewels behind each, and mitigations that break the attack path.
Two-sided assurance for OEM product vendors and renewables operators — attestation, trust and authenticity for every digital system installed in IT and OT critical infrastructure.