DER Security Corp

DER Security Corp, which markets itself as DERSec, is an American cybersecurity company focused exclusively on operational technology (OT) security for distributed energy resources (DER). Its platform is designed to protect the rapidly expanding fleet of connected grid-edge devices — solar inverters, battery energy storage systems, EV chargers and similar assets — that are replacing or supplementing traditional central power generation. The company positions its technology as purpose-built for DER environments rather than adapted from generic IT or OT security tools, and it emphasizes protocol awareness across standards such as IEEE 2030.5, SunSpec Modbus, DNP3 and OpenADR. DERSec's product suite is organized around four offerings. DERSec Sentry provides cyber-physical verification for DER, detecting protocol-valid commands that are nonetheless operationally dangerous, such as reactive power setpoints that could degrade voltage stability or active power commands that threaten grid frequency. DERSync Gateway delivers secure IEEE 2030.5 aggregation with multi-vendor protocol translation and built-in compliance, available in cloud or edge deployments. DERSim Digital Twins offers high-fidelity simulation for security testing so that controls can be validated without touching production systems. DERSec LabTest Pro provides local monitoring and edge AI for resilient telemetry at the grid edge, online or offline. Beyond products, the company offers advisory and implementation services. These include cyber advisory for risk assessment, architecture review and compliance readiness (for example NERC CIP-015 and IEC 62443), incident response planning and tabletop exercises; DER simulation services for red-team exercises, firmware fuzzing and fleet-scale load testing; and professional services spanning cyber-physical test range design with Hardware-in-the-Loop (HIL) and Software-in-the-Loop (SIL) capability, SOC integration, custom protocol adapters and 24/7 managed active defense. The company states that its founding team comes from the standards-setting organizations that built the distributed energy grid, including the SunSpec Alliance and Sandia National Laboratories, and that its leadership has experience at AutoGrid (DERMS/VPP), NTT and IBM, along with M&A and exit experience. DERSec says its founders helped architect communication standards that underpin a large share of distributed energy deployments worldwide. It also cites expertise forged through U.S. Department of Energy programs at Sandia National Laboratories. DERSec is headquartered in Scotts Valley, California, according to public company data. It is a private company. Its go-to-market messaging stresses regulatory pressure from NERC CIP, IEC 62351 and EU NIS2, and it markets to utilities, grid operators and DER fleet owners. Recent announcements highlighted on its website include participation at NVIDIA GTC 2026 and the RSA Cyber Startup Expo with live Power IOC demonstrations, an Ignition SCADA integration for real-time OT intrusion detection, a partnership with Nozomi Networks for unified IT/OT DER visibility, and dual IEEE 2030.5 CSIP Aggregator and Client certification for DERSync.

DER Security Corp, known by the brand DERSec, was founded to address the cybersecurity and interoperability challenges created by the shift from central power plants to millions of distributed energy resources. The company states that it was born from the standards-setting organizations that built the distributed energy grid, and that its founders did not merely implement SunSpec Alliance and Sandia National Laboratories protocols but architected them. It cites more than 25 years of experience architecting the communication standards that power today's DER ecosystem, and claims that more than 80% of distributed energy deployments worldwide rely on communication standards pioneered by its founding team. Founding leadership is described as having held roles in SunSpec Alliance, IEEE 2030.5 and grid interoperability protocols worldwide. The company also points to proven leadership from AutoGrid (DERMS/VPP), NTT and IBM, plus successful M&A and exit experience, as part of the background that shapes its enterprise-grade, protocol-native approach. Its services expertise is described as forged through U.S. Department of Energy programs, with work originating at Sandia National Laboratories, including cyber-physical test ranges with Hardware-in-the-Loop (HIL) and Software-in-the-Loop (SIL) testing capability. DERSec's mission is to protect the critical infrastructure powering the clean energy transition by building cybersecurity that is as native to the grid as the standards that define it. The company frames the energy transition as the most critical infrastructure shift of our lifetime, in which central power plants are replaced by millions of solar inverters, batteries and electric vehicles, causing the grid's attack surface to explode. Its vision is a decarbonized grid where security is built into every layer. Commercially, DERSec has built a product suite organized around four products: DERSec Sentry for cyber-physical verification, DERSync Gateway for secure IEEE 2030.5 aggregation, DERSim Digital Twins for high-fidelity simulation, and DERSec LabTest Pro for local monitoring and edge AI. The company complements these with advisory, simulation and professional services, including 24/7 managed active defense. It markets to utilities, grid operators and DER fleet owners, and highlights regulatory drivers such as NERC CIP, IEC 62351 and EU NIS2. Public company data places DER Security in Scotts Valley, California, in the United States. The company is private. Its recent public announcements include appearances at NVIDIA GTC 2026 and the RSA Cyber Startup Expo with live Power IOC demonstrations, an Ignition SCADA integration for real-time OT intrusion detection, a partnership with Nozomi Networks for unified IT/OT DER visibility, and dual IEEE 2030.5 CSIP Aggregator and Client certification for DERSync.

• Founding team described as architects of SunSpec Alliance and Sandia National Laboratories DER communication protocols, with 25+ years of standards experience.

• DERSec product suite established around DERSec Sentry, DERSync Gateway, DERSim Digital Twins and DERSec LabTest Pro.

• DERSync achieves dual IEEE 2030.5 CSIP Aggregator & Client certification.

• Ignition SCADA integration announced for real-time OT intrusion detection for DER.

• Partnership with Nozomi Networks announced for unified IT/OT DER visibility.

• DERSec featured at NVIDIA GTC 2026 and RSA Cyber Startup Expo with live Power IOC demos.

Purpose-built, protocol-native OT cybersecurity and interoperability for distributed energy resources, engineered exclusively for DER environments rather than adapted from IT or generic OT tools.

• DERSec Sentry

  Cyber-physical verification for DER. Detects protocol-valid commands that are operationally dangerous, including Volt/Var manipulation, frequency disturbances, active power abuse and nameplate falsification.

• DERSync Gateway

  Secure IEEE 2030.5 aggregation with multi-vendor protocol translation and built-in compliance; available as Cloud or Edge deployment.

• DERSim Digital Twins

  High-fidelity simulation for security testing; validate controls without touching production.

• DERSec LabTest Pro

  Local monitoring and edge AI; resilient telemetry at the grid edge, online or offline.

1. 1DERSec – Securing Every Connected Energy Resourcedersec.io
2. 2About DERSec – DERSecdersec.io
3. 3Products – DERSecdersec.io
4. 4Services – DERSecdersec.io
5. 5DER Security (United States) – Wikidatawikidata.org