// QUANTROPIC · AI AND INDUSTRIAL SECURITY · SINGAPORE · GERMANY
We assess AI systems and industrial environments in context: the information they consume, the systems they can reach and the ways between them. Security assessments, secure architecture and specialist training, for engagements worldwide.
// WHY QUANTROPIC
You are deploying AI, connecting industrial systems or making changes to a critical environment. You need to understand the exposure, whether existing controls remain effective, and what deserves attention first.
Quantropic brings together experience in critical infrastructure and military security with AI security specialisation since 2018. We examine systems in context—their connections, permissions and operational dependencies—to identify how weaknesses could affect your organisation.
You work directly with the practitioners conducting the assessment, from the initial questions through to findings, recommendations and verification.
// WHAT OUR WORK GIVES YOU
We map the relevant systems, connections and access paths to show where information and operational dependencies cross security boundaries.
We document what was examined, what was observed and what requires further validation. Passive assessment and controlled testing are selected according to the environment and the agreed scope.
We explain the significance of each finding, its potential consequences and the changes that deserve priority. Recommendations take account of your architecture and operating constraints.
Our involvement can continue through architecture review, remediation and verification of agreed changes. You have technical support as recommendations become decisions and implementation work.
// SERVICES
// Q-SAM · QUANTROPIC SECURITY ARCHITECTURE MODEL
Q-SAM places every system, data set and model in one of four areas and three zones. The position sets a baseline; the properties and controls of the element refine it into a security level from 0 to 100.
The ways between positions carry the risk. Each way is evaluated for what it transports, the controls on it and how trust travels along it: a weak source can pull a well-placed target down.
Confidentiality, integrity and availability are evaluated separately against the protection level your organisation sets for each element.
The result is a map of your estate with every place and every way scored, the ones that fail marked, and the smallest change that makes them pass. It is the model behind our assessments and architecture work, and the one we teach.
DISCUSS YOUR ARCHITECTURE →// HADES · SPECIALIST SECURITY ASSESSMENTS
An AI system’s exposure also depends on the information it consumes, the tools it can use and the systems it can reach.
HADES is Quantropic’s specialist assessment service for examining those relationships. We combine our own research and tooling with practitioner analysis, using passive assessment and controlled adversarial testing within an agreed scope.
For industrial and other sensitive environments, passive assessment provides an option where active testing is restricted.
Findings document what was examined, the evidence obtained and what needs attention.
DISCUSS A HADES ASSESSMENT →// SELECTED WORK
Examples from Rolf Schulz’s assessment work in industrial environments.
AUTOMOTIVE
An assessment examined access paths between the office network and shop-floor systems, including KUKA welding robots. Testing demonstrated that manipulation of robot operation could compromise weld integrity.
The findings led management to decide on changes to the architecture.
Role Lead architect
CHEMICAL
Assessments across sites in Asia—including China—the United States and Brazil examined risks of data leakage and manipulation. The work included remote laboratory environments.
In an assessed environment, a USB keyboard attack enabled access to a Siemens industrial interface.
Role Lead architect and security testing lead
// LEADERSHIP
Founder & Principal
Rolf brings more than 30 years of experience in critical infrastructure, industrial and military security, including assessments of military-grade, multilevel security systems. He has specialised in AI security since 2018 and has developed his own methodology for critical infrastructure assessments.
LINKEDINDirector
Daphne brings experience in enterprise AI, business development and strategic partnerships across Asia-Pacific. Her work focuses on connecting AI capabilities with business priorities, developing partnerships and translating technical capability into commercial outcomes.
LINKEDINEach assessment has a named technical lead and an agreed scope, responsibilities and deliverables. Additional specialists are brought in according to the requirements of the engagement.
We work with selected partners and maintain no exclusive vendor relationships.
// CONTACT
Tell us about the system, the environment and the question you want answered. We come back with our questions, a proposed scope and the names of the people who would do the work.