Skip to main content
PROCESS FIRST. SECURITY BY DESIGN.PITTSBURGH, PA EST. 2018
MSS WORKSINDUSTRIAL SECURITYContact engineering
← MSS WORKS / SITE POLICY

SITE TERMS / EFFECTIVE OCTOBER 28, 2026

The scope of
this public resource.

Use these engineering resources to prepare a discussion. Production changes require a reviewed design and plant approval.

AUTHOR / OWNER
MSS Works Industrial Security
REVISION
October 28, 2026

Operator and purpose.

This public website is provided by MSS Works Industrial Telemetry & OT Security LLC under the MSS Works Industrial Security brand. Our address is 2400 Smallman St, Strip District, Pittsburgh, PA 15222. The site introduces our services, explains selected industrial security concepts, and provides a browser-based planning tool. Questions about these terms or the intended use of a resource should be directed to ops@mssworks.com.

By using the public material, you agree to use it lawfully and within the limits described here. If those limits do not suit your intended use, contact us before relying on the material for that purpose. A separately signed service agreement governs any contracted engineering, monitoring, or response work. Browsing the site, downloading a plan, or sending an introductory email does not create a managed service engagement.

Engineering material needs site-specific review.

Articles, diagrams, protocol examples, and architecture briefs are general discussion material. They cannot account for your equipment, firmware, safety requirements, topology, regulatory position, or operating history. The anonymised architecture briefs are illustrative scenarios rather than verified customer results. References to IEC 62443, NERC CIP, or AWWA J100 do not constitute a certification, audit opinion, or guarantee that a particular installation meets an obligation.

Before applying any idea to production, obtain appropriate engineering review and the approval required by your organization. Test expected operating states, recovery, maintenance, and failure behavior. The website does not replace vendor instructions, process safety analysis, or the judgment of qualified personnel responsible for the installation. A change that appears narrow at the network layer may have consequences elsewhere in an industrial process.

Limits of the segmentation planner.

The planner creates a conceptual rule outline from a small set of selections. Its security level is a planning target selected for discussion, not a calculated achieved level or certification result. Actual IEC 62443 requirements depend on a documented assessment of the system, individual zones, and conduits. The tool does not evaluate equipment capabilities, the complete foundational requirements, or whether an implemented system satisfies them.

Its output uses endpoint roles rather than deployable addresses. It omits the device-specific syntax, dependencies, and validation needed for a production firewall. A data diode recommendation assumes a suitable outward data replication use case and compatible gateways. Do not paste the output into equipment as a configuration. Preserve the assumptions and limitations when sharing a downloaded plan so the next reviewer understands what it represents.

Responsible use and service boundaries.

You may read the material and use the planner for lawful internal evaluation. You may share downloaded outlines with colleagues or advisers for that purpose, keeping their context intact. Do not use the website to attempt unauthorized access, interfere with availability, misrepresent the origin of the material, or submit malicious content. Any third-party trademarks mentioned identify relevant technologies and remain with their respective owners.

Email addresses on the site are communication routes, not a promise of immediate incident response. Existing customers should follow their contracted escalation procedures. If a physical emergency is developing, use the facility’s established emergency process and appropriate emergency services. Do not wait for a website enquiry to be acknowledged. Scope, response times, authority to act, and service availability must be established in the applicable signed agreement.

Availability, responsibility, and updates.

We aim to keep the site useful and accurate, but public resources may contain errors or become outdated. To the extent permitted by applicable law, the website is supplied without a warranty of uninterrupted availability or fitness for a particular installation, and we limit responsibility for loss arising from reliance on this general material. Nothing here excludes liability that cannot lawfully be excluded. Updated terms will carry a revised effective date; contact us if a change affects your planned use.