Zuul

Zuul is an operational technology (OT) security company focused on securing building management systems (BMS) and critical infrastructure. The company was founded by former NSA cybersecurity professionals and targets OEMs, integrators, building owners, and operators. Zuul's platform brings cryptographic identity, policy-driven enforcement, and continuous verification into OT and building control environments. Rather than adding security as a layer on top of existing systems, the company embeds its security capabilities directly into OT platforms, working with BMS OEMs and system integrators to include these controls from initial deployment through the full system lifecycle. Core capabilities of the Zuul platform include: - Cryptographic identity for every device, service, and user on the control network - Policy-driven enforcement aligned to operational workflows - Certificate lifecycle automation - Continuous verification of system state, configuration, and communications - Embeddable security patterns for OEMs and integrators to reuse across deployments The company holds patents in secure infrastructure control, certificate lifecycle automation, and policy-driven enforcement for OT environments. Its approach is grounded in original research and is designed to address common OT security gaps such as flat legacy networks, devices lacking authentication or encryption, fragmented IT/OT responsibilities, and compliance frameworks that lack enforceable controls. Zuul's stated design philosophy prioritizes controls that can be deployed, maintained, and recovered from failure in real-world OT environments, rather than compliance-oriented or assessment-based approaches.