See it on your network · sample report
What Maigadi finds — from a single packet capture.
Bring a PCAP and Maigadi turns it into this: a full asset picture, the signature-less anomalies others miss, and the quiet hygiene problems — analysed offline, with nothing leaving your hands.
Illustrative sample · sanitised data · representative of a 14-day passive POV
Asset inventory
Every asset, discovered passively.
| Asset | Type | Zone | Protocol |
|---|---|---|---|
| PLC-Filler-Line2 | PLC | Process / Zone 2 | Modbus/TCP |
| HMI-WaterTreatment | HMI | Supervisory / Zone 3 | OPC UA |
| RTU-Substation-A | RTU | Field / Zone 1 | DNP3 |
| ENG-WS-01 | Engineering WS | Supervisory / Zone 3 | S7comm |
| Historian-01 | Historian | Supervisory / Zone 3 | Modbus/TCP |
+ 42 more assets across 5 protocols.
Anomalies
The signature-less attacks — with the evidence.
Unauthorised write to PLC-Filler-Line2
ENG-WS-01 issued a write command this PLC had never received. No signature exists for it — Maigadi flagged it because it is not part of this network’s normal.
New device on the process VLAN
An unmanaged device appeared and began polling controllers — a profile change with no prior baseline.
Reconnaissance from ENG-WS-01
Sequential connections across the subnet — a sweep pattern consistent with discovery.
Network hygiene
The quiet problems — from day one.
Excessive broadcast traffic
Zone 2 broadcast volume is ~8× a healthy baseline — a sign of misconfiguration or a chatty device.
Modbus polling over-rate
Historian-01 polls PLC-Filler-Line2 ~5× faster than the rest of the fleet — worth tuning.
Unexpected cross-zone path
A flow bridges Zone 3 and Zone 1 directly, bypassing the expected boundary.
See your own report.
A passive proof-of-value turns your network into a report like this — in days, with zero disruption.