The Secure Train
A holistic architecture for rolling stock cybersecurity.
Moving beyond isolated controls to a fully monitored, zoned and resilient onboard environment — designed with the rail industry, achievable today.
Secure the train as a connected system — not a set of isolated devices.
Modern rolling stock is a complex, connected ecosystem. As connectivity increases, so does the attack surface. The Secure Train is a unified cybersecurity architecture that provides deep visibility and control across the entire vehicle.
Developed in collaboration with industry leaders Westermo and EKE-Electronics, this architecture is achievable today and designed to meet the rigorous demands of rail operators and asset owners. Deeper assurance work — including penetration testing and SBOM analysis — is supported alongside the architecture to provide full-lifecycle coverage.
Purpose-built components for rolling stock
RazorSecure capabilities, Westermo networking, and EKE-Trainnet® MVB — combined into a single, coherent technology stack.
Digital Maintenance Gateway
Unique credentials, audited activity and secure software updates - replacing obsolete maintenance laptops.
MVB Monitoring
EKE-Trainnet® monitoring combined with RazorSecure intrusion detection for deep visibility across the MVB.
Whole-Train Visibility
Switch-based monitoring on the Westermo Viper series - one architecture covering CAN, MVB, TCMS, comfort and passenger networks.
