Built by someone who spent his career in the field
CITED Relevance was founded by Joshua Hayes, who spent 27 years in outside plant fiber optic and process control field operations before building software for the people he used to work alongside. That is not a tagline. It is the reason BreachSpider exists, and the reason it speaks the language of the plant floor instead of the security conference.
Most industrial cybersecurity tools are built by security companies looking into operational technology from the outside. BreachSpider was built from the inside out, by someone who has stood in substations and pump houses and control rooms, and who knows what a technician actually faces when something is wrong at 2 a.m. and no one can yet say whether it is mechanical or cyber.
The problem worth solving
Across the country there are utilities, water authorities, and regional manufacturers where one person carries the entire weight of industrial cybersecurity. No dedicated team. No six-figure budget. No realistic way to afford the enterprise platforms built for the Fortune 500. These are the operators running the infrastructure everyone depends on, and they are the most exposed.
BreachSpider was built for that person. Enterprise-grade vulnerability intelligence, designed and priced for one accountable individual rather than a staffed security operations center.
What BreachSpider does
BreachSpider is a live ICS and OT vulnerability intelligence platform. It enriches more than 384,000 vulnerability records with industrial context, matches them against a customer's specific devices and versions, and shows which ones apply to a given environment. It syncs known exploited vulnerabilities daily from the CISA catalog, maps findings to NERC CIP and IEC 62443 obligations, drafts compensating control guidance where no vendor patch exists, and produces framework-aligned reports under company letterhead.
The platform is grounded in active vulnerability research. The founder maintains an ongoing research practice in ICS and OT vulnerabilities, and that work feeds directly back into what the platform knows.
Deterministic matching, AI where it helps
BreachSpider's matching and ranking are deterministic: the same device and version always give the same result, and every finding traces back to its source. AI is used where it helps. It enriches vulnerability records with industrial context, and it runs a chat assistant that retrieves from BreachSpider's own verified vulnerability data rather than generating open-ended answers, in plain language an operator can act on.
Where we are
CITED Relevance is an early-stage company with a live platform, based in Jefferson, Georgia.