Waterfall Unidirectional Security Gateways for Rail and OT

Waterfall Security Solutions Ltd. is an industrial cybersecurity company headquartered in Israel with sales and support offices in North America, protecting critical industrial networks since 2007. It serves rail operators, power plants, oil and gas, water utilities and manufacturers that must share operational data with IT and the cloud without exposing control systems to remote attacks.

Its Unidirectional Security Gateways combine hardware that can physically send data in only one direction with software that replicates OT servers, such as historians, train location databases or signalling monitors, to the enterprise network. Attackers and malware have no path back in. The portfolio adds HERA for hardware-enforced remote access, Waterfall for IDS to feed signalling traffic safely to a SOC, WF-Flip for scheduled updates, WF-Secure Bypass for emergency access, Waterfall Blackbox for tamper-proof logs and Waterfall Central for fleet monitoring.

• Unidirectional Gateway: Hardware-enforced one-way data flow from OT to IT networks.
• Server replication: Replicates real-time operational servers and databases to the enterprise network.
• HERA: Remote access to OT systems without a network connection path.
• Waterfall for IDS: Lets intrusion detection on signalling networks report to enterprise or cloud SOCs.
• Waterfall Blackbox: Stores tamper-proof forensic logs.
• Waterfall Central: Monitors all deployed gateways from one console.

An urban metro operator in Hanoi or Ho Chi Minh City can send train location data to passenger apps through a unidirectional gateway. A power plant can replicate its historian to the corporate network for analytics. A seaport can protect crane and terminal control systems while sharing operational data with business systems.

Rail and industrial operators can publish real-time data for passenger apps, predictive maintenance and cloud analytics while the control network stays physically unreachable from outside. Signalling traffic can be monitored by enterprise or cloud SOCs without opening an inbound path. Vendors can perform remote maintenance through HERA without a conventional network connection.

Rail signalling, metro systems and port cranes are becoming more connected, and guidance such as the joint NCSC and CISA OT connectivity principles of 2026 recommends hardening OT boundaries with hardware-enforced protections. Vietnam and Southeast Asia are building urban metro lines, high-speed rail and smart ports, which raises demand for strict network segmentation of signalling and control systems.

Legal entity Waterfall Security Solutions Ltd.; headquarters in Israel with sales and support offices in North America; active since 2007. Reports over 1,000 protected sites, more than 20 verticals, 6 global sales and operations hubs and 14 published patents. Technology partners include Siemens Energy, Alstom, Schneider Electric, Yokogawa, AVEVA, Emerson, GE Vernova, Fortinet and Dragos.