Products

One family of tools for CIP, operations and reporting.

Use GridShield for continuous evidence, CIPStart and DocPilot to run the program, GridWatch for generation performance and GridReport for reporting — together or on their own.

Side by side

Compare the products

QuestionGridShieldCIPStartDocPilotGridWatchGridReport
What it is forContinuous NERC CIP evidence from your OT and IT devicesRunning your CIP program: impact, policies, plans, records, RSAWsDrafting CIP-003 and CIP-013 documents and finding gaps in existing onesPerformance of solar, battery storage and wind sitesPerformance and CIP audit reports
Where its data comes fromRead-only collection from your devices (Nodes, optional Agents, passive SPAN)Records your team keeps, plus GridShield alertsYour entity profile, site types and the documents you give itSite data sent to its signed ingest APIGridWatch and the GridShield Command Center, read-only
CIP coverageRSAW worksheets for all 14 FERC-approved CIP standardsCIP-002 impact wizard, CIP-003 policies and plan, records for CIP-004 to CIP-015CIP-003 Attachment 1 sections, R1 policy, R3 designation; CIP-013 R1 planCIP-003 site and asset classification; CIP-005 R2 records for its own sign-insCIP audit reports per site or standard, from GridShield data
What you get outHash-chained Evidence Vault with CSV export; RSAW worksheetsRSAW PDFs, audit ZIP (narratives, evidence index, manifest), compliance calendarDraft documents a person must review before approvalPerformance ratio, capacity factor, specific yield; threshold alarmsPDF, Excel and CSV reports, on demand or scheduled
Use on its ownYesYesNo: an add-on to CIPStartYesNeeds GridWatch or GridShield data to report on
Continuous NERC CIP evidence

GridShield

Collects read-only evidence from your OT and IT devices, hash-chains every record, and keeps RSAW worksheets current — inside your own network.

  • Command Center, site Nodes and optional Agents
  • Read-only Modbus TCP, DNP3, BACnet, SEL, SSH, WinRM, SNMP and more
  • Passive SPAN monitoring for write commands, new devices and GOOSE replay
  • SHA-256 hash-chained Evidence Vault
  • RSAW worksheets for all 14 FERC-approved CIP standards
  • Air-gapped install from a bootable ISO; updates install only when their GridSafe signature verifies

Works with: Sends high and critical alerts to CIPStart as CIP-008 incidents and CIP-015 anomalies; GridReport reads its compliance data.

GridShield Evidence Vault
Run your CIP program

CIPStart

A self-hosted workspace for the people who own the CIP program: decide impact, write policies and plans, keep records per standard and build your RSAWs.

  • BES impact wizard for CIP-002 categorization
  • Policy library with approvals and 15-month review clock
  • CIP-003 low-impact plan, Attachment 1 sections 1–6
  • Record modules for CIP-004 through CIP-015
  • Evidence vault, RSAW builder with PDF export and audit-readiness score
  • Compliance calendar and notifications (email, Teams, Slack, ServiceNow, Jira)

Works with: Receives GridShield alerts and turns them into CIP-008 incidents and CIP-015 anomalies.

Substation equipment
Local AI drafting for CIPStart

DocPilot

An add-on that drafts CIP-003 and CIP-013 documents and checks existing documents for gaps — running on a local model, with a person approving every word.

  • Drafts 10 document types, including CIP-003 Attachment 1 sections and the CIP-013 supply-chain plan
  • Scans a document against a chosen standard and lists the gaps
  • Proposes text to close each gap; you accept or reject each addition
  • Runs on a local model — documents are not sent to an external AI service
  • An AI-drafted document cannot be approved without a completed human review

Works with: Part of CIPStart; uses your entity profile and site types.

Control room
Generation performance

GridWatch

Performance monitoring for solar, battery storage and wind: performance ratio, capacity factor, alarms, and CIP-003 classification for the sites it watches.

  • Temperature-corrected performance ratio, capacity factor and specific yield
  • Solar, BESS, wind and fleet views with hourly and daily rollups
  • Threshold alarm rules with acknowledge and resolve
  • Signed, rate-limited data ingest with physical-limit checks
  • CIP-003 site and asset classification with a BCSI inventory
  • Interactive remote access records for its own sign-ins (CIP-005 R2)
  • Its own sign-ins protected by multi-factor authentication and account lockout

Works with: GridReport builds investor and O&M reports from GridWatch data.

Offshore wind farm
Reporting

GridReport

Scheduled and on-demand reports for owners, operators and compliance teams, built from GridWatch performance data and GridShield compliance data.

  • Nine performance report types, from investor monthly to fleet comparison
  • PDF, Excel and CSV output, on demand or on a schedule
  • Draft, adjust and finalize workflow
  • CIP audit reports per site or standard with a verifiable checksum
  • Evidence review workflow with reviewer approvals

Works with: Reads GridWatch and the GridShield Command Center through read-only connections.

Utility-scale solar farm

Not sure where to start?

Tell us about your sites and CIP obligations and we will suggest the right combination.