AI Digital Workers That Automate OT Security Programs for Critical Infrastructure

Cabreza is a Philadelphia-based operational technology security company that describes its product as Service-as-Software: AI digital workers that carry out the recurring work of an OT security program rather than a dashboard that reports on it. Co-founders Jason Rivera, who previously built the cyber-physical systems practice at Security Risk Advisors, and CTO Marcello Delcaro, whose background is in software supply chain security and industrial control systems, target water utilities, rural energy cooperatives, port facilities and municipal transit authorities that carry industrial-scale risk without dedicated OT security staff.

The platform is organized around personas instead of modules. A user selects a discipline, such as GRC, security architecture, intelligence, security operations, engineering, program management, procurement or vulnerability research, and supplies context covering sites, roles, equipment, vendors, standards and assets. The system then reads public records to identify relevant facilities, suppliers, advisories and regulators, drafts the requested runbook, workbook or job aid with citations back to source clauses, runs a fabrication review, and retains the user's edits so corrections persist into later sessions.

Two design choices separate the approach from a general-purpose assistant. Every claim is expected to trace to a cited source, and a Redaction Studio filters confidential material before upload, with models running inside the company's own cloud environment and customer data excluded from training. Vendor recommendations are presented as neutral, with no paid placement. Eight primary personas expand to more than forty disciplines on paid plans, and a Frontline Infrastructure Program announced in March 2026 offers reduced-cost access to low-resource US and EU operators.