PWX Discover
Agentless. Finds every power component across the fleet, maps firmware to known CVEs and shows attack paths from an exposed BMC to GPU damage.
See discoveryAI INFRASTRUCTURE SECURITY
The control plane
for the power layer.
The power layer beneath every AI server, finally watched. Attacks caught, crypto miners exposed, stolen keys spotted, in milliseconds.
01Power attackOne command at the power layer can crash a server or burn out the hardware. Caught in about 20 ms, 571 times out of 571.02Crypto miningHidden miners hijack AI servers and steal power and compute. PWX exposes them by the power they draw.03Crypto keysSecret encryption keys leak through how much power a chip draws. PWX spots the attempt at the rail.
Purpose-built for the infrastructure that cannot fail
AI DATA CENTERSTELECOMFINANCIAL SERVICESDEFENSEGOVERNMENT
AI DATA CENTERS
The densest racks ever built.
Every new gigawatt of AI capacity arrives with thousands of power controllers nothing in the security stack defends. PWX adds the missing line of defence in software, on servers already racked.
Request a pilotTELECOM & CRITICAL UPTIME
Unattended sites, zero maintenance windows.
Core and edge sites run for years without hands on the hardware. The same measurements that catch an attack also catch power components drifting toward failure, before they take a site down.
Request a pilotDEFENSE & GOVERNMENT
Sovereign by design.
Runs fully inside your environment, including disconnected networks. Machine telemetry only: no workload content, no customer data, ever. Enforcement acts under policy you set and can revoke.
Request a pilotTHE THREAT IS REAL
The layer beneath the OS is under active attack.
The power-control layer is no longer theoretical exposure. Industry research and confirmed incidents show it being probed, breached, and abused now.
Third-party incidents and research. Evidence the threat is real, not claims PWX detected these.
Tens of thousands of BMCs exposed to takeover.
Server management controllers reachable from the open internet, from flaws first flagged over a decade ago.
Black Hat USA 2026, runZeroAll four telecom operators in Singapore breached.
State-linked group gained months-long persistent access using zero-days and rootkits.
CSIS, Feb 2026Miners deployed within 10 minutes of access.
Cryptomining campaign used compromised credentials to deploy miners on cloud compute in ten minutes.
AWS GuardDuty, Nov 2025From cryptomining to supply-chain compromise.
One actor escalated from mining to compromising trusted security tools and AI gateways, planting backdoors for lateral movement.
Palo Alto Unit 42, 2026Critical GPU host takeover, CVSS 9.0.
NVIDIAScape: a three-line container escape grants full root on the GPU host, systemic across managed AI clouds.
Wiz, CVE-2025-23266Remote silicon destruction, proven.
PMFault drove voltage out of spec over PMBus to permanently damage server CPUs, remotely, no physical access.
Black Hat Asia 2023, CVE-2022-43309Every one of these ends at the same place: the power-control layer inside the server. The layer below your security stack, and the one PWX was built to see.
ADVANCING SECURITY FOR THE AI SUPERCYCLE
Your security stack ends at software.
PWX goes deeper.
A compromised administrator or firmware component can issue commands beneath SIEM and EDR visibility. PWX creates an independent control plane for the physical power layer.
PWX Monitor
Continuous monitoring, alerts and SIEM export, into the tools you already run.
See monitoringPWX Protect
Six modules, from millisecond detection by the PWX-01 agent on the BMC to inline blocking with PWX-06 (roadmap).
See the modulesONE INDEPENDENT CONTROL PLANE
Infrastructure that can
detect, decide and defend.
PWX turns invisible machine behaviour into threat verdicts that security and infrastructure teams can act on, while the evidence stays inside your environment.
- Continuous attack-surface discovery
- 100 Hz detection, on the server
- Physics-based attack detection
- Evidence-led enforcement
HARDWARE-VALIDATED
Protection measured
in milliseconds.
Built from real hardware research with transparent validation boundaries, not a generic anomaly engine wrapped around power data.
Live attack detection
Measured during a physical voltage attack.
Continuous detection
Per controller, on your hardware, no cloud round-trip.
Pilot scope
4–6 weeks, success criteria agreed in advance.
PMFAULT / LIVE HARDWARE PROOF
5.21 V → 4.64 V.
Detected before damage.
A live command drove a physical rail outside its safe behavior. PWX observed the evidence and produced a verdict in 20 milliseconds.
REAL HARDWARELIVE ATTACKREPEATABLE TEST
VRM_01 / VOLTAGE · LIVE100 SAMPLES / SEC
FRAMES / S100
VOUT NOW5.212 V
VERDICTNORMAL
DEPLOY WITH CONTROL
Start by mapping the surface.
Earn the right to enforce.
Discover
PWX Discover maps the attack surface without installing anything.
Monitor
PWX Monitor alerts into your SIEM; the PWX-01 agent runs record-only, every verdict logged, nothing acted on.
Protect
PWX Protect acts only after evidence and policy are agreed.
AI infrastructure protecting AI infrastructure.
The AI is behavioural, not generative. It learns what your hardware normally does, and reports what does not fit.
START WITH 1–5 SERVERS
See the power layer.
Then decide how far to go.
A focused 4–6 week pilot on your own or production-identical hardware, with measurable success criteria agreed in advance.
Start a pilot conversation