Radiflow

Radiflow develops a purpose-built OT and ICS security platform rather than a general enterprise endpoint product. Its current product materials describe iSID for passive asset discovery, network visualization, behavioral baselining, and anomaly or threat detection; CIARA for data-driven OT risk assessment, breach-and-attack simulation, mitigation prioritization, and reporting; iCEN for centralized management across multiple sites; and Active Scanner for deeper, targeted asset queries. The architecture is relevant to industrial environments because it can ingest mirrored traffic and operate without treating production systems like ordinary IT endpoints. Radiflow also describes Smart Collectors and secure gateways for distributed or remote sites. These capabilities address a persistent visibility problem: operators often have incomplete inventories, legacy controllers, proprietary protocols, and limited tolerance for active testing or downtime.

The commercial buyer set includes utilities, energy and oil-and-gas operators, manufacturing, transportation or maritime environments, and managed security service providers that need to monitor multiple industrial customers. The product is positioned for CISOs, OT or plant managers, SOC teams, auditors, and service providers. Its APIs and documented integrations with SIEM, identity, network-security, asset-management, and industrial-platform partners can reduce adoption friction, although integration breadth is not the same as independently verified customer depth. Radiflow says its solutions are deployed at more than 8,000 sites on its product and company pages, while its homepage currently markets 20,000 sites globally. The discrepancy should be resolved in diligence before using deployment scale as a hard traction metric; either figure indicates an established installed base, but neither page provides a customer-by-customer reconciliation or recurring-revenue disclosure.

The market is attractive but crowded. OT security demand benefits from industrial digitization, ransomware and sabotage concerns, regulatory pressure, and the operational cost of outages. Radiflow competes with specialist vendors such as Claroty, Dragos, Nozomi Networks, and Microsoft Defender for IoT, as well as broader security and networking suppliers including Cisco, Fortinet, Palo Alto Networks, and Armis. Its differentiating thesis is a combined workflow from asset visibility and detection to quantified risk, digital-twin simulation, compliance reporting, and budget-aware mitigation planning. That can be valuable for operators that need to explain technical exposure to business owners, regulators, and boards. It is not a moat by itself: competitors increasingly combine discovery, vulnerability context, threat intelligence, exposure management, and response, and large platform vendors can bundle adjacent capabilities into existing contracts.

Radiflow was founded in 2009 and continues to present itself as an independent operating brand with a Tel Aviv base and international offices or partners. Sabancı Holding disclosed that its technology investment vehicle DxBV acquired 51% of Radiflow on May 30, 2022, making Radiflow a subsidiary; this is more reliable current ownership information than the record’s prior Series C label. The acquisition provides a strategic parent and potential access to industrial, energy, and infrastructure relationships, but public sources do not establish current revenue, margins, renewal rates, customer concentration, or the terms of any later ownership change. LinkedIn still lists Radiflow as privately held, with 51–200 employees and a Tel Aviv headquarters, but directory ranges are not audited headcount. The company’s continued product updates, partner activity, and 2026 public marketing indicate ongoing commercialization, while the limited financial disclosure warrants a moderate team and traction score rather than an assumption of venture-scale growth.

The national-security relevance is credible through infrastructure dependency, not because public sources establish military deployments. Electricity, water, manufacturing, transport, communications, and defense supply chains all rely on cyber-physical environments whose compromise can create physical, economic, or safety consequences. Passive monitoring, asset inventory, threat detection, risk prioritization, and simulation can therefore support resilience programs used by civilian critical infrastructure and defense-adjacent industrial suppliers. The strongest diligence question is whether Radiflow can translate technical capability into measurable reduction in outage risk and response time across heterogeneous legacy environments. Other important questions include independent validation of detection performance, false-positive rates, protocol coverage, deployment effort, cloud versus on-premises economics, product security, and the extent to which the Sabancı ownership structure changes channel access, governance, and strategic optionality.