ChangeGuardOT

ChangeGuardOT is a web + lightweight desktop collector app for detecting and approving configuration changes across OT assets (PLCs, HMIs, engineering workstations, historians). Instead of trying to “scan everything,” it focuses on the most failure-prone reality in plants: undocumented tweaks, vendor remote sessions, and emergency edits that later cause downtime or safety incidents. The collector runs on a Windows engineering workstation or jump host and captures high-signal events (project file diffs, firmware/logic downloads, RDP/VPN sessions, key registry/service changes) and normalizes them into an auditable change timeline. A web console provides change requests, risk scoring, and simple approval workflows mapped to ISA/IEC 62443 and NERC CIP evidence needs. This is not a magic box: it won’t replace full asset inventory or network IDS, but it can materially reduce “unknown change” incidents with minimal plant disruption.