solutions by industry

Verticalize the proof, not the product.

One engine, the same entry everywhere: the free, read-only Network Audit. What changes by industry is the trigger that makes someone look, the cost of being wrong, and who is asking.

Start the free network audit

banks · insurers · payment and market infrastructures

The question stops being “are we segmented”.
It becomes “show me, for last Tuesday”.

  • The trigger: a DORA audit, a Zero Trust programme, a firewall cleanup, a cloud migration, an acquisition.
  • The cost of being wrong: audit reconstruction by hand, months late; the outage after a change; isolation nobody proved.
  • What Themis changes: a dated pack per scope your auditor can replay; conservative rule retirement; a named human on the sensitive flows. DORA asks it of you and of the providers you audit.

core the whole answer for most regulated estates regimes: DORA · NIS2 · PCI DSS · ISO 27001 · GLBA/FFIEC context (directional)

In Europe, the clock is already running.

  1. Jan 2025DORA in application. Financial entities must audit their ICT third parties — now.
  2. Mar 2026ANSSI publishes ReCyF, translating NIS2 into checkable objectives.
  3. Late 2026France's Resilience bill; roughly 15,000 entities learn they are in scope.
  4. 2027First ANSSI controls. “Show me, for this date.”

electricity · gas · grids · critical utility operators

Prove the permitted paths into OT.
Without sending a byte off-site.

  • The trigger: a NIS2 programme, an OT segmentation project, a new interconnection or site, an incident.
  • The cost of being wrong: downtime with a direct operational cost; field remediation; lateral movement into OT; controls that cannot be evidenced.
  • What Themis changes: over-permissive reachability across the IT/OT boundary, found from configuration alone — no agent, no probe, no device login, nothing leaving the site.

core regimes: NIS2 · NERC CIP where it applies · IEC 62443 zones and conduits (directional)

carriers · cloud and hosting · data centres · IXPs · managed infrastructure

You already sell trust. This makes it a feature you can show.

  • The trigger: a simplification or SRv6 programme, a tenant's audit request, DORA or NIS2 pressure arriving from your own customers.
  • The cost of being wrong: control-plane complexity, cross-tenant reachability, path deviation, SLA and trust claims you cannot prove.
  • What Themis changes: per-tenant evidence packs, 100% on your infrastructure, air-gap capable — something a US-SaaS control plane structurally cannot say to your compliance customers.

core the entry is the read-only audit SRv6 carriers are the strongest case for the fabric: path and jurisdiction proof for slices and interconnects; already on SRv6-TE, assurance walks to path control directly

prime contractors · critical suppliers · sensitive environments

Deterministic. Reproducible. Nothing leaves the tenant.

  • The trigger: Zero Trust, a supplier audit, a secure programme environment, a segmentation redesign.
  • The cost of being wrong: long audit cycles, delayed programmes, evidence that cannot be reproduced, certification blockers.
  • What Themis changes: no model in the verdict, no GPU, a dependency-free engine your security team can read, a signed licence file for air-gapped estates, a named human on every sensitive case.

core regimes: NIS2 where it applies · CMMC and DFARS context (directional) — procurement and accreditation mapped before anything else

0500 fit is not an industry

If the estate looks like this, the industry matters less.

full meshIT / OT boundaryhybrid cloudIPv4 / IPv6 coexistencepolicy sprawlfrequent changemulti-cluster Kubernetesisolation that must be demonstrated

Healthcare

Clinical, administrative and IoT networks, vendor access, uptime-sensitive change. Read-only first; no rip-and-replace. HDS · HIPAA context.

Transportation

Campus, WAN and OT, many third parties, operational zones. Intended paths verified; hidden reachability reduced. NIS2 transport.

Critical manufacturing

IT/OT convergence, multi-site plants, frequent exceptions. Drift found before enforcement; one lighthouse site to expand from. NIS2.

Europe: evidence, sovereignty, NIS2 and DORA, on-infrastructure processing — Themis is France-based. United States: Zero Trust (NIST SP 800-207), critical-infrastructure resilience, measurable segmentation proof. Same pack, read per market.

e000 End.DT6 deliver

Start the free network audit.

Read-only, fixed scope. We compare your declared intent to what is actually running, and hand back the gap list — in the language your auditors read.

Start the free network audit Or just email us
Start the free audit — read-only