Corsha launches Folio to map industrial OT networks

Corsha has launched Folio, a module for documenting operational technology networks. It is aimed at manufacturers and other industrial operators that lack up-to-date records of how their systems are connected and communicate.

Part of Corsha's Industrial Identity Security Platform, Folio automatically creates and updates maps and documentation using live network and access data. It is intended to give security, network and operations teams a current view of how OT systems are running, rather than relying on outdated design documents or manual assessments.

Maintaining accurate OT documentation is a persistent challenge for industrial operators, especially in environments that have evolved over time. Records are often missing or no longer reflect actual operations, while manual reviews can take weeks and still leave gaps in compliance evidence.

Folio uses data collected through Corsha's Gatekeepers to track identities, connections and data flows across OT networks. Teams can then generate hardware lists, connection maps and Microsoft Visio data flow diagrams for operational, security and network use.

The module is positioned around three main uses: day-to-day operations, ongoing compliance work and the introduction of new technologies into existing industrial environments. These include risk assessment, incident response preparation and documenting systems for frameworks such as IEC 62443, NERC CIP and Zero Trust programmes.

Documentation gap

The issue the release addresses is familiar in industrial settings. Operators looking to add robotics, predictive analytics or other software-driven tools to brownfield environments often need an accurate map of assets, data flows and system boundaries before they can assess risk or meet internal and external controls.

According to Corsha, Folio is intended to replace periodic manual documentation exercises with a continuously updated operational view. This includes network connections, machine identities and access information, helping teams identify drift between intended design and actual operations.

The product also includes a live connection canvas for designing boundaries, zones and machine groups while showing active data flows and enforced segmentation policies. It uses IEC 62443 terminology throughout the workflow and supports exports to Visio, a format commonly used in industrial design and documentation.

Anusha Iyer, Founder and Chief Executive Officer of Corsha, said the release is intended to address a widening gap between industrial system design and live operations.

"Industrial enterprises can't modernize safely when their operational picture no longer reflects how their operations actually run," said Iyer.

She added that the product draws on the company's identity data to improve visibility into machines and system links.

"Folio builds on the identity intelligence at the heart of our platform to give security and operational leaders an accurate, current understanding of every machine and every connection, and its purpose in their environment. That means faster recovery when incidents happen, compliance that keeps pace with change, and a clear path to adopting new technologies like robotics and physical AI. We are excited about this use of AI and ML in the Corsha platform to automate the tedious but critical work of day-to-day operations," said Iyer.

Operational focus

Corsha's broader business focuses on securing machine-to-machine connections in industrial environments through an identity-based approach. Folio extends that model into documentation and system mapping, giving users a way to turn operational data into records that can be shared across teams and used in assessments.

The module can produce updated system, connection and architecture documentation in minutes, with the aim of reducing manual compliance work and improving incident recovery. Up-to-date specifications may also help prevent misconfigurations and downtime by giving teams a clearer picture of what is running on the network at any given moment.

Corsha sells into sectors including aerospace, automotive, consumer goods, data centres, defence and facilities management. Its latest release reflects a broader push across industrial cybersecurity beyond passive monitoring and towards tools that combine live operational data with documentation, policy enforcement and change tracking.

Key functions in the new module include real-time visibility into OT network activity, mapping of connections and data flows, identity-based monitoring of changes, architecture design tools and exports for Microsoft Visio.