// platform · security
How Resilion handles your data
Resilion runs the program work. It does not sit on the plant network. Each customer is an isolated tenant. Unshipped integrations are named as unshipped.
What this page will defend
Resilion is how Hillstrong runs industrial security programs across a plant fleet. It scores maturity, routes site-tiered tasks, and stores evidence as work closes. It reads documents and program data. It does not read live process traffic.
The product domain is resilion.io. App and tenant hosts will live there. Marketing stays on hillstrongsecurity.com. Stepan Company is a customer. Raul Dusa is the named reference.
Posture, in writing
-
01 · plant network
No agent on the plant floor. No SPAN tap. No write path to controls. If a finding needs a sensor, that is a different product and a different vendor.
-
02 · tenancy
Each customer runs in an isolated tenant. Data from one operator does not train a model for another. Tenant hostnames use resilion.io.
-
03 · AI
Tenant-isolated models draft charters, RACIs, and tasks. A person accepts or rejects the draft. The model does not issue plant-floor control.
-
04 · integrations
Standards, policies, and assessment files ingest today. EDR, IAM, and CMMS connectors are on the roadmap. Do not treat them as shipped.
SSO, audit-log retention, and data residency are walked on the demo with the tenant you would actually run. This page does not invent those numbers. See the Resilion platform for what the product does, and how a running program differs from OT detection.
// FAQ
Security questions buyers ask
- Does Resilion connect to live OT systems?
- No. Resilion works from your documentation, assessments, and program data. It does not touch control systems and does not require an agent on the plant floor.
- How is customer data isolated?
- Each customer runs in its own tenant. Tenant hostnames use the resilion.io product domain. Marketing pages stay on hillstrongsecurity.com. We walk SSO, logging, and residency on the demo rather than invent a hosting claim here.
- Does Resilion use AI on plant data?
- Tenant-isolated models draft governance and route work. A person accepts or rejects every change. The model does not write to PLCs, HMIs, or historians.
- Which integrations are shipped?
- Resilion ingests standards, policies, and assessment findings you already have. Integrations with EDR, IAM, and CMMS are on the roadmap. Do not treat them as shipped.
Walk the tenant on a demo
Book 30 minutes. Bring the last assessment and the questions your security team will ask.