NeuroPing Request a pilot

The firewall speaks.
NeuroPing explains.

NeuroPing is a single on-prem Windows app that reads your firewall estate — read-only — and turns it into fleet health, OT visibility, and auditor-ready evidence. No cloud. No agents on the firewalls. No configuration changes, ever.

Runs fully air-gapped Read-only API and logs One Setup.exe

Chat is the front door. Behind it sit the screens that make the answers possible — each one a read-only view of evidence the collectors already hold.

Overview
Network Map
VPN Tunnels
HA Pairs
OT Assets
Compliance

Rendered in the application's own design system. The full product is shown in a live walkthrough.

What it does

Ask first.
The screens are the receipts.

The main event

Ask it, in plain language.

Chat is how most people use NeuroPing. Ask about a tunnel, a rule, a site, or what happened last night — it answers from the evidence its collectors already hold on your box, and shows you what it used to decide. No dashboards to interpret first.

Where it reasons is your call
Local / air-gap Cloud · redacted Disabled

IPsec VPN tunnel health

Per-layer state — IKE, IPsec, tunnel monitor — with verdicts, not just counters. Know whether a tunnel is down, unstable, one-directional, or simply idle.

substation-west-primaryIKE up · IPsec down
corp-dr-siteup · idle

HA pair readiness

Peer state, config sync, and link health rolled into a deterministic readiness verdict: would failover succeed right now?

corp-hq pairReady · 100/100
active fw-corp · standby fw-corp-b · synchronized

OT asset discovery

Purdue-level-aware inventory built from the traffic your firewalls already see. No agents on process equipment.

PLC · 10.20.62.14L1 · modbus/tcp
UNKNOWN · 10.20.62.77new · modbus/tcp

Path analysis, honest confidence

Can host A reach host B, and which rule decides? Every answer carries its confidence level — and says so when evidence is incomplete.

10.20.61.8 → 10.20.62.14 :502allowed
rule OT-SCADA-ALLOW · confidence: high

Alerts & incident correlation

A ranked, deduped feed of problems NeuroPing can already prove — correlated across VPN, HA, traffic, and system events, with desktop notifications.

Over-permissive rule scada-to-otopen
Learned Modbus baseline went silentopen
Also in the box: segmentation analysis · firewall fleet monitoring · evidence packs · NERC-CIP compliance scanner · offline signed licensing

Read-only by architecture.
Not by policy.

NeuroPing reads. It has no code path that writes configuration to a firewall, so monitoring can never become mutation — and every answer it gives is traceable to the evidence it read. Built for NERC-CIP-audited environments.

Security & architecture
Firewall API scope read-only
Config write paths none in the codebase
Agents on your devices 0
Outbound connections required 0

Pilot it on your own fleet.

We run a small design-partner pilot program for utilities, renewables operators, and their MSPs. Bring one site; keep your change window closed.

Request a pilot