Both SIGAGuard (2018) and EnergyShield (2019–2022) are explicitly built around detecting anomalous behavior in critical infrastructure environments.
SI-GA DATA SECURITY (2014) LTD
Israeli cybersecurity SME specialising in anomaly detection and vulnerability assessment for critical energy infrastructure.
Their core work
SIGA Data Security is an Israeli cybersecurity SME specializing in protecting critical infrastructure — particularly energy systems — from cyber threats. Their core product focuses on anomaly detection at the operational technology (OT) level, identifying suspicious behavior in industrial control systems before damage occurs. In their EU project work, they have contributed expertise in vulnerability assessment, DDoS mitigation, and SIEM integration for energy grid operators. They sit at the intersection of IT security and industrial operations, making them relevant to any organization running physical infrastructure that is digitally connected.
What they specialise in
EnergyShield focused directly on vulnerability assessment and monitoring for critical energy infrastructure, reflecting deep domain expertise.
EnergyShield keywords include DDoS mitigation and SIEM, indicating capability in network-layer defence and security event management for industrial environments.
EnergyShield explicitly tagged cybersecurity culture as a keyword, suggesting involvement in training or organizational security posture, not only technical tooling.
How they've shifted over time
In 2018, SIGA's H2020 footprint was a lean SME Phase 1 feasibility study (SIGAGuard) focused narrowly on a single product concept: anomaly detection for critical infrastructure. By 2019–2022, they joined a large Innovation Action (EnergyShield) as a participant, and their contribution profile broadened significantly — adding vulnerability assessment, DDoS mitigation, SIEM, and cybersecurity culture to their keyword signature. This shift suggests a maturing product company moving from a single-feature demo to a multi-layered security platform relevant across the energy sector's full threat surface.
SIGA is evolving from a niche anomaly detection vendor into a broader critical infrastructure security provider, making them a strong candidate for energy sector cybersecurity consortia that need both technical tooling and operational security expertise.
How they like to work
SIGA has taken the coordinator role once (SIGAGuard, a solo SME feasibility study) and joined a larger multi-partner consortium as a participant (EnergyShield). This pattern is typical of technology SMEs that validate their product through self-coordinated small grants, then embed the product in larger collaborative projects to gain market credibility and EU-funded field testing. With 21 unique partners across 10 countries from just two projects, their network density is high, suggesting they actively build broad consortia rather than working within a narrow circle.
Despite only two projects, SIGA has collaborated with 21 distinct partners across 10 countries, a notably broad reach for an SME at this scale. Their participation in EnergyShield — a multi-national critical infrastructure project — likely accounts for most of this geographic spread across Europe and beyond.
What sets them apart
SIGA occupies a rare niche: an Israeli SME with verified EU project credentials in OT/ICS cybersecurity for energy infrastructure, at a time when energy grid security is a top EU policy priority. Unlike generic IT security firms, their focus on the physical layer of industrial systems — where a cyber event has real-world consequences — gives them credibility with energy operators, grid managers, and critical infrastructure authorities. For consortium builders working on energy resilience, grid digitisation, or EU cybersecurity directives (NIS2), SIGA brings both a commercial product and field-tested EU collaboration experience.
Highlights from their portfolio
- EnergyShieldThe flagship project: a large Innovation Action worth nearly €770K to SIGA, focused on integrated cybersecurity for energy infrastructure — the strongest signal of their technical depth and European market ambitions.
- SIGAGuardTheir coordinator debut — an SME Phase 1 grant where they led and validated their own anomaly detection concept, demonstrating entrepreneurial initiative and product ownership rare among pure research participants.