We think like the adversary. Oscar Tango delivers real-world attack simulation, penetration testing, and security assessments for critical infrastructure and industrial control systems.
Oscar Tango is an offensive security firm purpose-built for operational technology environments. We operate at the intersection of OT security and adversarial tradecraft — bridging the gap between traditional IT security and the unique constraints of industrial systems.
Our name carries dual meaning: OT as in Operational Technology, the systems we protect - and Offensive Tradecraft, the tactics, techniques and procedures we practice.
Offensive security engagements designed around the realities of operational environments — where availability is paramount and the stakes extend beyond data.
Structured, scoped testing of industrial control systems, SCADA environments, historian servers, and OT network architecture. We identify exploitable paths from IT/OT boundaries to the engineering layer — without disrupting production.
Full-scope adversary emulation against your people, process, and technology. We simulate APT groups with documented OT capabilities — testing your detection, response, and operational resilience under realistic threat conditions.
Comprehensive evaluation of your OT security posture against recognised frameworks — IEC 62443, NERC CIP, NIST SP 800-82, and NCA OTCC. Gap analysis, architecture review, and a prioritised remediation roadmap.
Hands-on OT security training for engineers, security teams, and leadership — tabletop exercises, incident response simulations, and bespoke awareness programmes tailored to your industry and threat landscape.
Assessment of the physical and electronic controls that guard your OT estate — perimeter protection, surveillance and CCTV, intrusion detection, and access control systems. Delivered as a standalone engagement or as the physical dimension of a full-scope red team, we test how an adversary defeats these controls to reach the environments where cyber compromise begins.
Security assessment across your full wireless and cellular footprint — Wi-Fi, Bluetooth, and proprietary RF, through to the private 4G / 5G networks now underpinning industrial connectivity. We test private 5G implementations end to end: the RAN, core, and SIM / device trust boundaries that segmentation depends on. The same survey surfaces the rogue side — vendor-installed cellular modems, unauthorised access points, and out-of-band paths that quietly bridge the air gap past your controls.
We are not an IT security firm that added an OT practice. Industrial systems are our primary domain — we understand engineering constraints, safety instrumented systems, and the operational cost of downtime.
Based in the UAE with regional coverage across the Gulf. We understand the local regulatory landscape — UAE Cyber Security Council frameworks, TDRA requirements, and Saudi Arabia's NCA/OTCC controls — as well as international OT standards including IEC/ISA 62443 and NIST SP 800-82. We understand the threat actors that target regional critical infrastructure.
Offensive testing in live OT environments requires rigour that goes beyond standard penetration testing. Our methodology is designed to maximise finding quality while preserving operational continuity.
Tell us about your environment and what you're trying to achieve. We'll scope an engagement that fits your operational constraints.