DeNexus for Oil & Gas

Quantify, reduce and transfer oil and gas cyber risk

The DeRISK™ Intelligence Platform prices OT cyber risk in dollars at every platform, pipeline and refinery, ranks the mitigations that cut the most loss, and turns the result into evidence insurers can underwrite.

Talk to sales See how it works
Pipeline running through a forest
Midstream · Pipelines$4.3M EAL
Offshore oil rig at sea
Upstream · Offshore$5.8M EAL
Refinery process units and pipes
Downstream · Refining$6.9M EAL

Most operators can't say what an OT cyber incident would cost

OT cyber carries an estimated $31.1B in annual financial risk (Dragos & Marsh McLennan). Yet most sites can only rate their exposure red, amber or green.

Thousands of remote sites, few sensors

Wells and compressor stations spread over thousands of miles, mostly on legacy controllers with no OT monitoring.

One incident, many kinds of loss

Lost production, cleanup, repairs and missed deliveries hit at once. The DeRISK Consequence Model counts each cost exactly once.

A color can't be budgeted

Boards, regulators and insurers need a number. A heat map can't go into a budget or a renewal; an Expected Annual Loss can.

Module 3 · Dot wave

Quantify, reduce and transfer
OT cyber risk in oil and gas

Put a dollar figure on every site, from wellhead to refinery

DeRISK™ CRQ quantifies OT cyber risk site by site and rolls it up to the portfolio, so the board, the CFO and the CISO work from the same Expected Annual Loss.

  • Expected Annual Loss, Value at Risk and loss exceedance (OEP/AEP), site by site and across the portfolio
  • A 50-question assessment in the DeRISK Control Model, NIST SP 800-82r3 or IEC 62443
  • Five role-based reports at Level 3 Board-Grade, from the Cyber Risk Brief to the Risk Transfer Evidence Bundle
Explore DeRISK CRQ →

Built around how oil and gas actually runs

  • DeRISK™ CRQ models your operation the way you run it: segment by segment, site by site, wellhead to refinery.
  • Each site’s Expected Annual Loss traces to the losses that matter here: a spill, a forced shutdown, a missed delivery.
  • Every site rolls up into one portfolio view your CFO and insurers read the same way.

Featured Oil & Gas Resources

View all
Cover of the methodology paper Quantifying OT Cyber Risk: Where FAIR Stops ShortMethodology paper · 20 min read

Quantifying OT Cyber Risk: Where FAIR Stops Short

How FAIR applies in OT environments, where it stops short, and how DeNexus carries the analysis through to the plant floor.

Read the paperDownload the PDF
Sample report page on the cover of the paper OT Cyber Risk in Production DaysRole paper · COO & Operations

OT Cyber Risk in Production Days

Read the paper →Sample report page on the cover of the paper Prioritizing OT Security by Expected LossRole paper · CISO, CIO, CSO, and Cyber

Prioritizing OT Security by Expected Loss

Read the paper →Sample report page on the cover of the paper OT Cyber Risk in the BoardroomSample report · CEO & Board · PDF

Cyber Risk Brief

Download the PDF →
Oil & Gas CTA

Put a number on Oil & Gas OT risk, not a score.

Get a company-level estimate free, from wellhead to refinery, without connecting anything to your OT network. Or walk through a facility-level assessment with our team.

Start free Talk to sales

No credit card. No OT data integration required.