Product Security
Security Built Around Manufacturing
Predator Software develops manufacturing software used to connect, control and monitor critical shop-floor information. Product security is therefore designed around the real risks faced by manufacturers: protecting CNC programs, production data, credentials, configuration and connected systems.
Our Product Security Programme brings together secure development, vulnerability management, product risk assessment, security testing, deployment guidance and long-term product support.
Our Product Security Commitment
Predator Software is committed to developing and supporting products that are secure by design and maintained appropriately throughout their supported lifecycle. Security is considered during product planning, development, testing, release, maintenance and vulnerability response.
- Secure development. Security requirements are considered alongside functional requirements, with emphasis on least privilege, secure configuration, controlled access, credential protection and product integrity.
- Vulnerability management. Reported or discovered vulnerabilities are logged, assessed, investigated and tracked through remediation or formal closure.
- Security updates. Confirmed vulnerabilities are assessed for mitigation or corrective updates in supported products.
- Evidence and traceability. Product security activities are documented to support customers, machine builders and regulatory requirements.
Products Covered
Our Product Security Programme is being implemented across supported Predator Software products. The initial priority is on applications most directly connected to shop-floor systems and manufacturing networks.
Predator DNC
CNC networking and program transfer software. Security priorities include program integrity, controlled machine communications, access control, credential protection, logging and secure deployment of legacy and modern CNC protocols.
Predator MDC
Machine monitoring and production data collection software. Security priorities include protocol hardening, read-only operation where appropriate, service isolation, database security, input validation and protection of production data integrity.
Controls and supporting documentation will be extended across Predator PDM, FLM, RCM, Touch HMI, Tracker, Travelers, Virtual CNC, CNC Editor and other supported Predator products as the programme develops.
Secure Development & IEC 62443
Predator Software is aligning its product-security programme with the principles of IEC 62443, the internationally recognised cybersecurity framework for industrial automation and control systems.
Our primary focus is on the product-development and component-security requirements represented by IEC 62443-4-1 and IEC 62443-4-2, supported by system risk-assessment and security principles from the wider IEC 62443 series.
IEC 62443 alignment does not mean that every Predator product is currently IEC 62443 certified. It describes the industrial-security framework we are using to strengthen development practices, technical controls and supporting evidence.
Cyber Resilience Act Readiness
Predator Software is implementing a structured product-security programme in preparation for the EU Cyber Resilience Act (CRA). This includes product risk assessment, vulnerability handling, secure development processes, software component visibility, security support, technical evidence and regulatory reporting procedures.
Our approach is intended to give manufacturers, machine builders and integration partners clearer evidence of how Predator products are developed, supported and maintained from a cybersecurity perspective.
Where regulatory requirements are still developing, Predator will update its processes and documentation as applicable standards and guidance are finalised.
Secure Deployment Guidance
Product security depends on both the software and the environment in which it is deployed. Predator provides and is expanding guidance for secure implementation of manufacturing systems.
Network Segmentation
VLANs, firewall rules and controlled communication paths between servers, workstations and manufacturing equipment.
Least Privilege
Appropriate Windows service accounts, SQL permissions, authentication and restricted administrative access.
Legacy CNC Protection
Compensating controls for older machine protocols that do not support modern authentication or encryption.
Cyber Essentials & Recognised Cybersecurity Expertise
Manufacturing expertise backed by recognised cybersecurity knowledge. Predator Software combines decades of CNC and shop-floor software experience with Cyber Essentials certification and ISC2 Certified in Cybersecurity (CC) expertise within the business.
Predator Software Ltd is Cyber Essentials certified, demonstrating baseline technical controls designed to protect the business against common cyber threats. Our Product Security Programme is also supported by an ISC2 Certified in Cybersecurity (CC) professional, with knowledge spanning security principles, access controls, network security, security operations, business continuity, disaster recovery and incident response.
This combination strengthens the practical cybersecurity perspective we bring to connected CNC, DNC, MDC and wider manufacturing environments.
ISC2 Certified in Cybersecurity (CC) is an individual professional certification. It does not certify Predator Software products and is not a claim of IEC 62443 certification or CRA conformity.
Vulnerability Reporting & Security Advisories
Found a Vulnerability?
Security researchers, customers and partners can report suspected vulnerabilities through our dedicated disclosure process.
Security Advisories
Published product-security advisories provide information on affected versions, severity, mitigation and corrective releases where appropriate.
Product Support Lifecycle
Customers need to know how long a product and version will receive security support. Predator is formalising product support periods, supported-version information and end-of-support dates as part of its Product Security Programme.
The Product Support Lifecycle page will provide a clear reference for supported versions and security-support status as those policies are introduced.
Product Security Contact
For product-security questions, vulnerability reports or security-related enquiries:
