Skip to content

CyberGrant protects every aspect of your digital security

Discover the modular solutions designed to protect your company from external and internal threats, as well as new challenges like AI.

key-minimalistic-square-3-svgrepo-com

Digital asset protection

Automatic classification

Cloud encryption

Email protection

Anti-phishing

password-minimalistic-input-svgrepo-com

Remote access

Access rules

Credentials

Stolen Device

Web access

email grant

Post-send control

Protected Attachments

Human error

Advanced encryption

laptop-svgrepo-com (1)

Beyond Antivirus

External Threats

Data Exfiltration

Remote Work

Zero trust

pulse-svgrepo-com

Device control

Shared files

Audit Trail

Credential Access

Email Channel

Anomaly detection

password

Company vault

Controlled sharing

Zero-trust encryption

Logging and generation

share

Third-party users

RBAC

Anti-AI scraping

VDR

medal-ribbons-star-svgrepo-com

GDPR and encryption

NIS2

DORA

AI act

Audit

bot-svgrepo-com

AI control

Automated classification

AI blocking

Private AI

magnifer-bug-svgrepo-com

Attack Surface Mapping

Penetration testing

Ransomware

Human Factor

After the Test

Tailored cybersecurity for every business.
Scalable solutions compatible with legacy systems, designed for both SMEs and large enterprises requiring full control over data, access, and sharing.


IT
Consulting
Travel
Advertising

Construction
Real Estate

Oil & Gas
Electricity
Telco

E-commerce
Transportation
Shipping
Retail chains

Design
Automotive
Industrial

Central agencies
Local agencies
Supranational orgs

Discover security features to protect your data, files, and endpoints

PRODUCTS


Risorsa 17orizzFileGrant
RG_pittogramma_bluRemoteGrant

Securely store, share, and manage your files with an advanced, easy-to-use, and highly customizable platform.

RemoteGrant protects your business from attacks and data loss by enabling employees to securely access workstations and files from anywhere.

EXTENSIONS


Pittogramma_ConnectorConnector
AG_pittogramma_bluAIGrant
EG_pittogramma_bluEmailGrant
SG_pittogramma_blu SecretGrant

Encrypts every file on SharePoint and OneDrive, in any format, leaving your libraries, permissions, and daily workflows untouched.

AIGrant is your personal assistant - it understands your data, keeps it secure, and delivers exactly what you need.

Encrypt every email and keep control of attachments, even after sending.

Control every credential like a file. Share, track, and revoke access instantly.

Explore Connector Explore AIGrant Explore EmailGrant Explore SecretGrant
CGSite_hero_industry_multiutilities_2

Cybersecurity for multi-utilities and critical infrastructure

Energy & Utilities companies run on increasingly exposed digital infrastructure. CyberGrant blocks ransomware, intrusions and sabotage, and the protection stays on the data once it leaves the operational network.

AdobeStock_1326504953

 

 

 

Why are multi-utilities among the most exposed targets?

Digitalising power, water and gas multiplied the points of contact: connected SCADA, customer portals, contractors, IoT vendors. Serious incidents worldwide reached 5,265 in 2025, up from 3,541 the year before, a 48.7% rise and the steepest on record (Clusit Report 2026). An energy sector breach now costs USD 4.83 million on average (IBM Cost of a Data Breach 2025).

48,7% Growth in serious cyber incidents worldwide in 2025, the steepest ever recorded
4.83M average cost of an energy sector data breach
48% of breaches involve a third party

What are the top cybersecurity risks for energy & utilities?

Operational continuity Operational continuity

Every outage puts millions of users at risk. Cyber resilience is what keeps an essential service running, not an add-on to the IT budget.

 
access control Uncontrolled access

Technicians, contractors and third parties reach critical plants and systems, often without strong authentication. One stolen credential is enough. SecretGrant treats every credential like a file: shared, tracked, revocable.

 
critical data protection Unprotected critical data

Consumption records, contracts and plant documentation must be encrypted and traced, not just stored. FileGrant encrypts at creation and logs every single access.

 

 
Block Ransomware  Malware and Ransomware

Ransomware appears in 48% of the breaches analysed in the Verizon DBIR 2026, up from 44%. RemoteGrant blocks ransomware and phishing on endpoints and conceals exposed RDP ports.

 
Vulnerable vendors Vulnerable vendors

48% of breaches now run through a third party, double the figure of two years ago. The Santander case shows the mechanism: the cloud vendor is breached, the customer's data walks out. With EmailGrant, an attachment sent to a supplier stays revocable after sending. More on this in supply chain cyber risk.

 
meet compliance Compliance and NIS2

NIS2 demands monitoring, traceability and fast incident reporting, with baseline measures operational by 31 October 2026. That calls for verifiable audit trails, not statements of intent.

 

Which CyberGrant solutions protect multi-utility infrastructure?

FG_logo_horiz_blu

  • Quantum-safe Lock&Go encryption using CRYSTALS-Kyber, the NIST FIPS 203 standard, on plant diagrams, supply contracts and network documentation
  • RBAC permissions and expiry on links shared with contractors, maintenance crews, EPC partners and technical consultants
  • Download, print and screen capture blocking, with an audit trail on every single open
RG_logo_horiz_blu

  • Transparent encryption and USB whitelisting by serial number on substation, control room and engineering workstations
  • RDP port hidden from scanners for remote access to SCADA, telecontrol and back-office systems
  • Clipboard control and blocking of uploads to personal cloud accounts and unmanaged browsers
AG_logo_horiz_blu

  • On-premise private AI over operating procedures, tender specifications and plant manuals: data never leaves your network
  • Automatic classification of documents by plant, area and supplier, with a full log
  • A governed alternative to shadow AI, which adds 670,000 dollars to the average breach cost (IBM 2025)
AdobeStock_477748974_PA

MULTIUTILITIES

EG_logo_horiz_blu

  • Revoke access after sending: a misdirected attachment or a cancelled tender closes in one click
  • Scheduled expiry on messages and attachments, with tracking of who opened and from which IP
  • Extra password encryption on bids, commercial terms and bank details
RT_logo_horiz_blu

SG_logo_orizz

  • Encrypted vault for credentials to SCADA, telecontrol, regulatory portals and metering platforms
  • Tracked sharing with suppliers and shift staff, without ever sending a password in the clear
  • Immediate revocation at contract or shift end, with no need to change the credential
Linee-e-cerchi-sfondo-remotegrant

Power never stops. Neither should your defenses.

Frequently asked questions about cybersecurity for multi-utilities and critical infrastructure

Why are multi-utilities among the most targeted sectors?

Multi-utilities run essential services on hybrid infrastructure: industrial control systems, customer portals, cloud document platforms and a wide network of contractors. Serious incidents recorded worldwide reached 5,265 in 2025, up from 3,541 in 2024, a 48.7% rise and the steepest on record (Clusit Report 2026). An energy sector data breach costs USD 4.83 million on average (IBM Cost of a Data Breach 2025). The exposure does not come from plants alone. It comes from the technical, contractual and consumption documents that leave the perimeter every day.


What does NIS2 require from energy, water and gas operators in Italy?

NIS2 was transposed in Italy by Legislative Decree 138 of 4 September 2024, in force since 16 October 2024. Energy, drinking water, waste water and gas fall under the highly critical sectors, so operators are classified as essential or important entities. Baseline security measures must be operational by 31 October 2026. In practice: documented risk management, access control, encryption, supply chain security, event traceability and incident notification within the set deadlines.


What is file-centric DLP and why does a multi-utility need it?

Legacy DLP watches the exits from the network and stops working the moment a file reaches its recipient. File-centric DLP encrypts the document at creation, and the protection travels with the file wherever it goes. For a utility that means a plant diagram shared with a contractor, a supply contract or a consumption data export stays unreadable outside authorised devices, even if copied or exfiltrated. CyberGrant's FileGrant applies that model with quantum-safe encryption, post-sharing revocation and an audit trail on every access.

How do you protect data shared with contractors and technical suppliers? 48% of the breaches analysed in the Verizon DBIR 2026 involve a third party, against 30% the year before and double the figure of two years ago. Effective protection is not a contract clause, it is a technical measure: persistent file encryption, access allowed only from authorised devices, scheduled expiry and revocation after sending. FileGrant covers document sharing, EmailGrant extends the same logic to email attachments, SecretGrant to plant access credentials. Every access stays recorded in an audit trail you can bring to a NIS2 audit.
What is quantum-safe encryption and why does it matter to a utility?

Quantum-safe encryption uses algorithms resistant to attacks from quantum computers. CyberGrant uses CRYSTALS-Kyber, standardised by NIST as FIPS 203 (ML-KEM) in August 2024. The concrete risk is called "harvest now, decrypt later": data encrypted today with classical algorithms is collected now and decrypted once quantum computers reach scale. For a multi-utility that is a live concern, because grid designs, concessions and supply contracts hold value for ten or twenty years.

How do you keep confidential technical documents off public AI tools?

According to the Verizon DBIR 2026, 67% of users access AI services from non-corporate accounts on corporate devices, and the share of employees who use AI regularly went from 15% to 45% in one year. Policies alone do not hold. AIGrant, CyberGrant's on-premise private AI extension, brings the engine inside the infrastructure: technicians query documentation and procedures through an enterprise RAG segregated by department, with no data leaving. In parallel, FileGrant blocks AI scraping on encrypted files and CyberGrant Connector keeps them unreadable to Copilot inside SharePoint.


Does CyberGrant replace SharePoint, Microsoft 365 or the systems already in place?

No. CyberGrant sits alongside the existing stack and covers the protection missing there. Connector encrypts files inside SharePoint and OneDrive with no migration: documents stay where they are, users keep their Microsoft login and habits, and encryption also covers the non-Office formats Microsoft Purview leaves uncovered. AIGrant does not replace Copilot: it offers an on-premise alternative for documents that cannot leave. RemoteGrant adds to the remote access tooling already in use rather than replacing it.


What you need to know

  • Serious incidents worldwide reached 5,265 in 2025, up from 3,541 in 2024, a 48.7% rise (Clusit Report 2026)
  • An energy sector data breach costs USD 4.83 million on average (IBM Cost of a Data Breach 2025)
  • Third parties are involved in 48% of breaches, up from 30% the previous year: contractors and suppliers are the fastest growing vector (Verizon DBIR 2026)
  • NIS2 (Italian Legislative Decree 138/2024) lists energy, water and gas as highly critical sectors: baseline measures operational by 31 October 2026
  • CyberGrant's file-centric DLP encrypts the document at creation with CRYSTALS-Kyber (NIST FIPS 203) and keeps revocation and audit trail alive after sharing