// QUANTROPIC · AI AND INDUSTRIAL SECURITY · SINGAPORE · GERMANY
We assess AI systems and industrial environments in context: the information they consume, the systems they can reach and the ways between them. Security assessments, secure architecture and specialist training, for engagements worldwide.
// WHY QUANTROPIC
You are deploying AI, connecting industrial systems or making changes to a critical environment. You need to understand the exposure, whether existing controls remain effective, and what deserves attention first.
Quantropic brings together experience in critical infrastructure and military security with AI security specialisation since 2018. We examine systems in context—their connections, permissions and operational dependencies—to identify how weaknesses could affect your organisation.
You work directly with the practitioners conducting the assessment, from the initial questions through to findings, recommendations and verification.
// WHAT OUR WORK GIVES YOU
We map the relevant systems, connections and access paths to show where information and operational dependencies cross security boundaries.
We document what was examined, what was observed and what requires further validation. Passive assessment and controlled testing are selected according to the environment and the agreed scope.
We explain the significance of each finding, its potential consequences and the changes that deserve priority. Recommendations take account of your architecture and operating constraints.
Our involvement can continue through architecture review, remediation and verification of agreed changes. You have technical support as recommendations become decisions and implementation work.
// SERVICES
// Q-SAM · QUANTROPIC SECURITY ARCHITECTURE MODEL
Q-SAM maps the systems, data and AI models in scope across four deployment areas, each with three zones.
We assess the protection of each element and the communication and access paths connecting them. Properties, controls and dependencies all matter: a weakness along a connection can affect the systems it reaches.
Protection is scored from 0 to 100 within the model and compared with the requirements your organisation defines. Confidentiality, integrity and availability are evaluated separately.
The resulting map highlights gaps and helps compare changes to system placement, connections and controls. It supports decisions about where to strengthen protection and where further assessment is needed.
DISCUSS YOUR ARCHITECTURE →Deployment areas are where a system runs, from your own high-security environment to the open Internet; a trusted cloud is one under contract with you. Zones are how strictly it is separated inside that area: Z0 the core, Z2 the middle, Z1 the outer ring. Connections are the communication and access paths between positions, with the controls on them.
// HADES · SPECIALIST SECURITY ASSESSMENTS
An AI system’s exposure also depends on the information it consumes, the tools it can use and the systems it can reach.
HADES is Quantropic’s specialist assessment service for examining those relationships. We combine our own research and tooling with practitioner analysis, using passive assessment and controlled adversarial testing within an agreed scope.
For industrial and other sensitive environments, passive assessment provides an option where active testing is restricted.
Findings document what was examined, the evidence obtained and what needs attention.
DISCUSS A HADES ASSESSMENT →// SELECTED WORK
Examples from Rolf Schulz’s assessment work in industrial environments.
AUTOMOTIVE
An assessment examined access paths between the office network and shop-floor systems, including KUKA welding robots. Testing demonstrated that manipulation of robot operation could compromise weld integrity.
The findings led management to decide on changes to the architecture.
Role Lead architect
CHEMICAL
Assessments across sites in Asia—including China—the United States and Brazil examined risks of data leakage and manipulation. The work included remote laboratory environments.
At one assessed site, a USB keyboard attack enabled access to a Siemens HMI. The resulting access provided visibility into the company’s wider international environment, revealing exposure beyond the local site.
Role Lead architect and security testing lead
// TRAINING & WORKSHOPS
Practical learning for people working with AI, enterprise technology and industrial systems.
ONLINE COURSES
Develop your knowledge of AI security, risk management and industrial security at your own pace—with support from Cerby, our AI learning coach.
WORKSHOPS · BRING YOUR OWN PROBLEM
Work with our practitioners on the use cases, architecture and security questions relevant to your organisation. Build understanding through practical exercises and discussion grounded in your team’s responsibilities.
Available internationally, online or in person.
// LEADERSHIP
Founder & Principal
Rolf brings more than 30 years of experience in critical infrastructure, industrial and military security, including assessments of military-grade, multilevel security systems. He has specialised in AI security since 2018 and has developed his own methodology for critical infrastructure assessments.
LINKEDINDirector
Daphne brings experience in enterprise AI, business development and strategic partnerships across Asia-Pacific. Her work focuses on connecting AI capabilities with business priorities, developing partnerships and translating technical capability into commercial outcomes.
LINKEDINEach assessment has a named technical lead and an agreed scope, responsibilities and deliverables. Additional specialists are brought in according to the requirements of the engagement.
We work with selected partners and maintain no exclusive vendor relationships.
// CONTACT
Tell us about the system, the environment and the question you want answered. We come back with our questions, a proposed scope and the names of the people who would do the work.