OTAISAFETY
← Directory  /  SCADA/edge platforms

Litmus Edge

Industrial edge data platform with optional cloud or local AI models.

ScoreInsufficient data
Unknown7/12
TypeVendor
Last checked2026-10-16
Visit official site ↗
12-point checklist
#CriterionCISAScoreEvidence
C1
Actuation capability
2 pts if: Cannot write/actuate, or writes are clearly isolated
P2, P4UnknownNot documented publicly / not yet verified
C2
Read-only by default
2 pts if: Write/method tools off unless explicitly enabled
P4UnknownNot documented publicly / not yet verified
C3
Write guardrails
2 pts if: Per-tag allowlist plus value/rate limits or interlock checks
P4UnknownNot documented publicly / not yet verified
C4
Human-in-the-loop approval
2 pts if: Critical writes need explicit human confirmation
P4UnknownNot documented publicly / not yet verified
C5
Authentication
2 pts if: Authenticated sessions to the OT endpoint; no anonymous default
P3, P42 · Verifiedlogin required, RBAC, LDAP/AD, app tokens (docs.litmus.io)
C6
Encryption & cert verification
2 pts if: Encrypted transport with server certificate verification
P41 · PartialTLS by default with self-signed cert; MQTT plain text by default, OPC UA SignAndEncrypt must be configured (Dell design guide)
C7
Audit logging
2 pts if: Every agent call/write logged durably
P3, P4UnknownNot documented publicly / not yet verified
C8
Network placement
2 pts if: On-prem/edge/air-gapped or push/DMZ flow; no inbound IT→OT path
P2, P42 · Verifiedoffline-first and air-gapped installation (docs.litmus.io)
C9
Data leaving the site
2 pts if: No telemetry; plant data can stay on-prem
P21 · Partiallocal SLMs in beta for air-gapped use; cloud LLMs also supported (Litmus press release)
C10
Fail-safe & safety independence
2 pts if: Fails closed; safety systems stay independent
P4UnknownNot documented publicly / not yet verified
C11
Vendor security disclosure
2 pts if: Published security policy / PSIRT
P3UnknownNot documented publicly / not yet verified
C12
Supply-chain hygiene
2 pts if: Versioned/signed releases; pinned installs
P31 · PartialOTA updates with verification checks (docs.litmus.io)
Sources

Vendor or maintainer? Send corrections or documentation →