Breakwater
One Platform. Your Entire Plant. BRKWTR
🏗️ Design & Deploy 📊 Network Visibility 🛡️ Threat Defense 📡 24/7 Monitoring 🔐 Secure Remote Access ☁️ Cloud & On-Prem

Design, deploy, monitor, and secure your plant's OT infrastructure — network to servers to SCADA. Everything your plant needs, nothing it doesn't.

Request a Demo View Plans & Pricing
Powered by Coastal IT Coastal Industrial Technologies

Simple, Transparent Pricing

Platform bundles for the best value, or pick individual modules. All plans include the Portal dashboard.

Monthly Annual SAVE 19%
Not ready to commit? Start a Pilot.
60 days, full platform, Gateway X3 Core included — $3,500 credited toward your subscription.
Start Pilot
Essentials
The visibility package — know what you have, know what's exposed.
$649/mo billed annually
Up to 100 devices
  • Portal — Executive command center
  • Manifest — OT asset inventory
  • Lookout — CVE & threat intelligence
  • Certificates — TLS/SSL monitoring
  • Forecast — Risk quantification
  • Channel — Secure remote access
  • ZTP — Zero touch provisioning
Subscribe
Best Value
Professional
The full operational package — see, measure, access, provision.
$1,999/mo billed annually
Up to 500 devices
  • Everything in Essentials, plus:
  • Forecast — Business impact & risk in $
  • Channel — Secure remote access
  • ZTP — Zero touch provisioning
  • Branded PDF reports
  • Context-aware CVE remediation
  • CPE-based vulnerability matching
  • Multi-site management
Subscribe
Full Platform
Enterprise
Complete solution for large deployments with dedicated support and unlimited devices.
Custom pricing
Unlimited devices
  • Everything in Professional, plus:
  • Forge — Managed OT cloud hosting
  • Anchor — Asset tagging & panel cert
  • Dedicated support + SLA
  • Custom integrations
  • White-label options
  • Quarterly business reviews
  • Priority response SLA
  • Gateway X3 Core hardware included
Contact Sales

Add-Ons — available on any plan

Gateway X3 Core
$1,500
one-time
Channel SRA
$25
per device/month
Forge VMs
$49–149
per VM/month
Priority Support
$499
per month

Need just one module? View a la carte pricing →

The Breakwater Platform

Eleven integrated modules — one platform to design, deploy, monitor, and secure your OT infrastructure

Portal
Portal
Executive command center — real-time stats, module launcher, and organizational overview
Helm
Helm
Network topology design, Purdue model zones, drag-and-drop device placement, and real-time monitoring
Manifest
Manifest
OT asset inventory, firmware tracking, and lifecycle management
Certificates
Certificates
SSL/TLS certificate monitoring, expiration alerts, and weak crypto detection across all OT endpoints
Lookout
Lookout
CVE intelligence, CISA KEV tracking, threat actor mapping, and context-aware remediation
Forecast
Forecast
Business impact analysis, risk quantification in dollars, and compliance scoring
Channel
Channel
Secure remote access with encrypted tunnels, session recording, and audit logs
ZTP
ZTP
Zero touch provisioning — generate configs, manage serial numbers, deploy remotely
Forge
Forge
Cloud OT infrastructure on demand — Ignition, Node-RED, MQTT, Grafana, and more
Anchor
Anchor
RFID/NFC asset tagging, panel certification, and automated inventory from first power-up
Breakwater AI
Breakwater AI
On-premises AI operations assistant — anomaly detection, natural-language queries, predictive maintenance

Breakwater Gateway

Purpose-built hardware for on-site OT security — monitoring, remote access, and intrusion detection in one appliance

Deploy at the Edge

The Breakwater Gateway combines asset discovery, encrypted remote access, and Coastal IDS threat detection in a single hardened appliance. Ships pre-configured — plug in, connect to your network, and start monitoring in minutes.

BW-100
Small sites
4-port GbE
$599
BW-200
Mid-size + IDS
6-port GbE
$999
BW-400
Enterprise + IDS
6-port 2.5GbE
$1,499

All models include Collector agent, Channel SRA, and automatic provisioning. BW-200 and BW-400 include Coastal IDS for passive network threat detection.

cX Gateway on Bosch ctrlX CORE
Already running Bosch ctrlX CORE?
Deploy Breakwater as a snap package directly on your ctrlX controller — no additional hardware required. Get OT asset monitoring and secure remote access integrated into your existing Bosch Rexroth automation platform.
BOSCH Rexroth | ctrlX

Breakwater AI

Process-aware intelligence that lives on your plant floor — not in someone else's cloud

On-Prem AI 100% Data Sovereignty

Your Data Never Leaves Your Building

Breakwater AI runs entirely on dedicated hardware at your facility. Your SCADA data, process variables, network telemetry, and operational intelligence never touch a cloud server. Full AI capability with zero data exposure.

Purpose-built for regulated industries where compliance mandates, air-gap requirements, and operational security make cloud AI a non-starter.

🔒
Air-Gap Ready
Operates fully disconnected from the internet
⚡
Real-Time
Process-aware anomaly detection in milliseconds
🏭
OT-Native
Understands protocols, processes, and plant context
📋
Compliance
Automated IEC 62443, NIST CSF, NERC CIP audits
WHAT BREAKWATER AI DOES
  • ✓ Natural language queries across your entire OT environment
  • ✓ Automated compliance reporting — 62443, NIST, NERC CIP
  • ✓ Process anomaly detection using historian + network data
  • ✓ Threat correlation — CVEs matched to your specific assets
  • ✓ Incident response automation — isolate segments in seconds
  • ✓ Risk scoring with financial exposure modeling
  • ✓ Asset inventory intelligence — ask questions, get answers
  • ✓ Integrates with Helm, Lookout, Forecast, and Channel

Dedicated AI hardware installed at your facility. Your data never leaves the premises.

AI OPS
Single-site AI intelligence for small to mid-size facilities
$2,500/mo
+ $4,999 one-time hardware
  • Natural language OT queries
  • Automated compliance reports
  • CVE-to-asset threat matching
  • Process anomaly detection
  • Risk scoring & exposure modeling
  • Up to 100 monitored assets
  • Email & portal support
Request Demo
Most Popular
AI OPS PRO
Full AI operations for large facilities and complex environments
$5,000/mo
+ $4,999 one-time hardware
  • Everything in AI Ops, plus:
  • Automated incident response actions
  • Segment isolation in seconds
  • Historian data correlation
  • Predictive maintenance insights
  • Up to 500 monitored assets
  • Custom AI model training on your data
  • Priority support with 4-hour SLA
Request Demo
AI OPS ENTERPRISE
Multi-site AI intelligence with centralized management
$10,000/mo
+ $4,999 per site hardware
  • Everything in AI Ops Pro, plus:
  • Multi-site centralized AI dashboard
  • Cross-facility threat correlation
  • Enterprise compliance rollups
  • Unlimited monitored assets
  • Federated learning across sites
  • Dedicated AI engineer support
  • Quarterly AI model review & tuning
  • Custom integrations & API access
Request Demo

All on-prem plans require Professional or Enterprise subscription. Hardware ships pre-configured — typical deployment in under 4 hours.

AnchorBreakwater Anchor

RFID/NFC Asset Tagging — Complete Asset Inventory Without the Spreadsheets

Every device in your control panels — tagged, tracked, and discoverable. Upload your panel BOMs, we encode the tags and ship them with a gateway. Your techs apply the peel-and-stick tags, power on the gateway, and your entire asset inventory appears in Manifest within minutes.

📱
NFC Tap-to-ID
Tap any tag with your phone for instant device details
📡
Auto-Discovery
Gateway reads all UHF tags — inventory in under 5 minutes
🔄
Change Detection
Knows when devices are added, removed, or swapped
🔗
Helm + Manifest
Don't have BOMs? Use Helm and Manifest to enumerate first
For Customers
Have Equipment in the Field?

You already know what's in your panels — you have the BOMs. Upload them, and we'll handle the rest.

  1. 1 Upload your panel BOMs using our template
  2. 2 We encode NFC + UHF RFID tags with your device data
  3. 3 Tags + Tag Gateway shipped to your facility
  4. 4 Your techs apply peel-and-stick tags to each device
  5. 5 Power on the gateway — full inventory in Manifest in minutes
Don't have BOMs? Use Helm's network discovery and Manifest's device enumeration to build your inventory first, then order tags based on what the platform finds.
For Panel Builders & Distributors
Building New Panels?

Ship every panel Security-Ready. Join the partner program — we handle encoding, you handle placement. Your customers get instant asset visibility on day one.

  1. 1 Upload your build BOM to the Partner Portal
  2. 2 We encode and ship tags + gateway to you
  3. 3 Apply tags during manufacturing, install gateway on DIN rail
  4. 4 Panel ships with "Security-Ready" certification
  5. 5 Customer powers on — full asset inventory, zero configuration
Partner benefits: Security-Ready certification badge, tiered commissions (10-18%), co-branded materials, and customer onboarding automation.
Apply to Partner Program
TAGS
NFC + UHF RFID encoded per device
$1.50/tag
Minimum 100 tags per order
  • NFC (NTAG 216) for phone scanning
  • UHF RFID for gateway auto-discovery
  • Industrial on-metal adhesive
  • Encoded with your device data + deep link
  • Rated -40°C to +85°C
  • Volume discounts at 500+ tags
TAG GATEWAY
DIN-rail RFID reader per panel
$699 one-time
+ $15/gateway/month monitoring
  • Reads all UHF tags in panel continuously
  • DIN-rail mount, 24VDC or PoE
  • Ethernet + WiFi connectivity
  • Detects add/remove/swap in real-time
  • Offline buffer — syncs when back online
  • Pre-configured, ships ready to install
ANCHOR MODULE
Platform subscription add-on
$199/month
Or included in Enterprise bundle
  • Panel inventory dashboard
  • Gateway health monitoring
  • Tag scan timeline + change alerts
  • BOM upload + tag ordering portal
  • Direct integration with Manifest
  • Mobile NFC tap-to-identify

Feature Comparison

See exactly what's included in each plan

ModuleEssentialsProfessionalEnterpriseA La Carte
Core Platform
Portal — Command Center✓✓✓Included
Manifest — Asset Inventory✓✓✓$549/mo
Lookout — Threat Intelligence✓✓✓$549/mo
Certificates — TLS Monitoring✓✓✓$249/mo
Advanced Modules
Forecast — Risk Quantification—✓✓$849/mo
Channel — Secure Remote Access—✓✓$749/mo
ZTP — Zero Touch Provisioning—✓✓$449/mo
Branded PDF Reports—✓✓Professional+
Enterprise Modules
Forge — Managed OT Hosting——✓Enterprise only
Anchor — Asset Tagging——✓$549/mo
Breakwater AI——✓Enterprise only
Support & Services
Email Support✓✓✓✓
Priority Support—✓✓$499/mo
Dedicated Account Manager——✓Enterprise only
SLA Guarantees——✓Enterprise only
Quarterly Business Reviews——✓Enterprise only
Limits
Max Devices100500Unlimited100 per module

See Breakwater in Action

Schedule a live demo with our team. We'll walk through your environment and show you exactly how Breakwater fits.

Frequently Asked Questions

Everything you need to know before getting started

What happens after I sign up?
After completing your signup, our onboarding team will reach out within one business day to schedule a kickoff call. We'll discuss your network environment, deploy monitoring agents, and have you up and running within 5–10 business days depending on network size.
What counts as a "device"?
A device is any network-connected endpoint we monitor — switches, routers, firewalls, PLCs, HMIs, servers, and other OT/IT infrastructure. Workstations and wireless access points each count as one device.
Are there long-term contracts?
All plans are month-to-month with no long-term commitment required. We offer discounted annual billing if you'd like to save. You can cancel at any time with 30 days' notice.
Can I upgrade or downgrade my plan?
Absolutely. You can upgrade or downgrade at any time. Changes take effect on your next billing cycle. Upgrading mid-cycle is prorated.
Do you support air-gapped or segmented OT networks?
Yes. We have experience deploying in air-gapped, DMZ, and segmented OT environments. Our onboarding team will work with you to design a monitoring architecture that fits your network topology and security requirements.
What industries do you serve?
We specialize in industrial and critical infrastructure environments including manufacturing, utilities, oil & gas, water/wastewater treatment, food & beverage, and pharmaceutical facilities.
Can I pay by purchase order instead of credit card?
Yes. Click "Request Quote" on any plan to receive a formal quote. We accept purchase orders with Net 30 payment terms, as well as ACH and wire transfer. Our team will work with your procurement department to get everything set up.
Do I need a Breakwater Gateway?
We strongly recommend it. The gateway enables on-site asset discovery, secure remote access, intrusion detection (BW-200/400), and zero-touch provisioning of network devices. Omni plans include a BW-200 gateway at no extra cost. View and Defend customers can add one during checkout.
Can I request a demo before committing?
Absolutely. Request a demo and our team will schedule a live walkthrough of the Breakwater platform tailored to your industry and environment. No commitment required.
How do I get support?
All plans include email support. Professional includes priority email support. Enterprise includes a dedicated account manager and on-call engineer support. Call us anytime at 844-ITFOROT.