Guides
Short, practical walkthroughs of the workflows Synapse is built for: model a site, check it against IEC 62443, find what’s wrong, and produce the evidence. Pick a goal below and follow along in the studio. Most take under ten minutes, and there’s nothing to install.
New to Synapse? Start with Your first checked design, the whole loop in three minutes.
Get started
Your first ten minutes in the studio. No signup, no setup — load a reference site and watch it check itself.
Your first checked design
Open a reference site, let it check itself against IEC 62443, and learn to read the result. The whole loop in about three minutes.
From a messy walkdown to a defensible design
Paste a site walkdown spreadsheet and get back a checked zone-and-conduit design plus a firewall rule schedule — no signup, about two minutes.
Recipes
Short, goal-driven walkthroughs. Each one starts from a real task an OT engineer has and ends with the artifact you'd otherwise build by hand.
Find and fix a segmentation gap
The studio opens flagging a workstation on the wrong network. Follow the finding to its cause, fix it in a few clicks, and watch the check turn green.
Export a firewall rule schedule
Turn your zone-and-conduit design into a per-flow allow list with explicit default-deny, and copy paste-ready Palo Alto and Cisco config.
Plan VLANs and IP addressing
Read and edit the addressing plan Synapse infers from your assets — subnets, VLANs, gateways and host counts — and catch flat networks before they ship.
Generate audit-ready evidence
Produce a branded PDF with the diagram, asset inventory, zone/conduit tables and a requirement-by-requirement coverage summary — one click.
Track vulnerabilities against your installed base
Match your modelled devices to published CVEs from CISA ICS, the EU vuln database and CERT@VDE, and see what's exposed where.
Worked examples
Whole scenarios, start to finish — a design, a problem, and exactly how Synapse surfaces and closes it.
The vendor-VPN stress test
A vendor asks for a VPN straight to the turbines. Inject it, watch four violations light up, and see the reference pattern that keeps remote access safe.
From a brownfield discovery to a checked design
You inherit a plant with no as-built diagram — just scan exports. Import them, watch the assets resolve to real devices, confirm what was inferred, take the guidance, and end with a checked model.
A substation that passes clean
Walk a faithful 16-asset substation reference — Purdue L0–L4 with an OT DMZ — and see why it applies with zero segmentation violations.
From a checked design to a cyber range
Export a validated design as a vendor-neutral manifest a cyber range can ingest to instantiate a digital twin for scripted pen-testing.
5 guides live, more on the way. Want one written? Tell us what you’re trying to do.