Security you can see into

In an industrial control system - a power plant, a substation, a vessel - a security decision can have physical consequences. A signal that halts a process, or lets it continue, isn’t just a log line. What matters then is how the decision was made, and whether you can check it.

The problem with the closed box

Many security products make decisions you can’t see into: proprietary algorithms and models that say “this is suspicious” without being able to explain why. For ordinary IT, that’s often something you can live with. For systems that control physical processes - where a misjudgement can knock out safety-critical functions - “trust us” is an inadequate answer. It also makes it hard to demonstrate compliance to an auditor who actually wants to see the logic.

Transparency is a security property

Being able to inspect how detection works - the rules, the models, what triggered an alert - isn’t only a matter of trust. It’s a precondition for understanding, verifying and improving your defences. What you can see into, you can also trust on your own terms - rather than because a vendor asks you to.

Built to be checked

This is part of the principle behind Dovre: detection and analysis should be possible to inspect and understand, not a black box. For organisations responsible for critical infrastructure - in power, water or the maritime sector - that means security decisions can be explained, documented and defended. Sovereignty isn’t only about where your data lives. It’s also about understanding the tools you defend yourself with.