OT Range | The OT Test Lab from PrOTect IT All
Coming soon · The OT test lab from PrOTect IT All

Real OT gear. Built, broken and fixed on camera.

A working plant network on the wall of Aaron Crow's studio. Siemens and Rockwell PLCs, HMIs, switches, firewalls, sensors and remote access, laid out by Purdue level and tested one task at a time. You get the honest take and the details.

SIEMENS + ROCKWELL PURDUE L0 TO L4 12-EPISODE SEASON 1 BUILD IN PROGRESS
The Lab

A plant cell you can follow across the wall

The OT Wall is laid out the way a plant should be: enterprise on one side, the process on the other, and every path between them crossing a firewall and an industrial DMZ.

We start it flat on purpose. One subnet, everything talking to everything, the way too many sites still run. Then we segment it, monitor it, and lock down remote access one episode at a time.

Guests join in person or remote over the lab's own isolated network. The lab never touches anything but itself.

L4Enterprise, simulatedCorporate PC and the attacker box for demos
L3.5Industrial DMZJump host, remote access, historian replica
L3Site operationsEngineering workstation, historian, AD, DNS, NTP
L2SupervisorySCADA server, operator HMIs
L1 / L0Plant cellsSiemens and Rockwell PLCs, I/O, drives, the water capstone

Monitoring taps every cell by SPAN and TAP, side by side.

Every episode

One task on the wall, start to finish

No slides. Each episode will take one real job a plant team does and run it on live gear.

Rack it

Install the gear, cable it into the cell, bring it up from factory defaults.

Config it

Build the config on camera, from baseline hardening to the episode's task.

Break it

Push it until something gives. Bad change, wrong rule, rogue laptop on a port.

Fix it

Find it, fix it, and say what it took. Then the honest verdict.

Where we can, we share the details: what we set up, what broke, and how we fixed it.

Season 1 · In the works

From a flat network to a monitored plant

Twelve episodes planned, in build order. Each one picks up where the last one left the wall.

01

The plan and the parts

The map, the bill of materials, unboxing.

02

The flat network

Both cells on one subnet. See how much is reachable.

03

Switching basics plants skip

Managed vs unmanaged, L2 vs L3, hardening.

04

VLANs and zones

Segment to the addressing plan, break it, fix it.

05

SPAN vs TAP

Same traffic both ways, and what each one misses.

06

Firewalls between levels

Default deny, built from the flows the process needs.

07

The OEM skid NAT problem

Two cells on the same subnet, both reachable.

08

Seeing the network

Open-source monitoring vs a commercial sensor, same wire.

09

The industrial DMZ

What belongs in it and what does not.

10

Remote access done right

A guest programs the PLC from outside, the right way.

11

Bad change, now what

Logic and config changes, caught or missed, then restore.

12

Capstone: the water system

A live water process behind everything built so far.

For vendors

Put your gear on the wall

OT Range runs on donated and loaned equipment. If your product belongs in a plant, it belongs in this lab.

  • You ship and license it. Return shipping on loans is yours too.
  • No guaranteed coverage. Gear may be featured in episodes and discussed on the podcast.
  • No script, no edit approval. If it is featured, you get an honest take.
  • Credit when featured. Named in that episode's show notes.
Send us your gear
L0 / L1PLCs, I/O and drives
L2HMI panels and SCADA
L1Industrial switches
L1 / L2OT-aware firewalls
MonitoringNetwork sensors and IDS
L3.5Secure remote access
L3 to L4One-way transfer
L3Asset inventory
L3Config backup and change detection
SoftwareEngineering and HMI licenses
Send gear

Tell us what you have

Fill this in and you get a confirmation email right away. Aaron reads every one himself and replies directly.

Want to sponsor the series instead? Talk to us about sponsorship.

No guaranteed coverage. We test it for real and say what we find.

Got it. Thank you.

A confirmation is on its way to your inbox. Aaron will reply directly, usually within a few business days.

Coming soon

OT Range is coming to the PrOTect IT All feed

The wall is being built now. Subscribe to PrOTect IT All and the first lab episode lands in your feed when it is ready. Full builds go to YouTube, the conversations go everywhere you listen.