// Smart City Solution page const { useState: useSCState, useEffect: useSCEffect } = React; // ── City Audit Console (hero visualization) ─────────────────── function CityAuditConsole() { const [scanLine, setScanLine] = useSCState(0); useSCEffect(() => { const t = setInterval(() => setScanLine(p => (p + 1) % 8), 420); return () => clearInterval(t); }, []); const rows = [ ["01", "OLT Switches — Factory Default Creds", "CRITICAL"], ["02", "Server BMC — Default Credentials", "CRITICAL"], ["03", "GIS System: SQL → Code Execution", "CRITICAL"], ["04", "City Platform: OWASP Top 10 Violations", "CRITICAL"], ["05", "Streetlight Gateway — Full Control", "HIGH"], ["06", "10% Cameras: Weak / Guest Credentials", "HIGH"], ["07", "70% Cameras: Hardening Failures", "HIGH"], ["08", "Video Analytics — Weak Credentials", "HIGH"], ]; return (
{/* Header */}
REDINENT XIOT · SMART CITY AUDIT
14 ASSET CLASSES
{/* Column headers */}
#FINDINGSEV
{/* Finding rows */} {rows.map(([num, name, sev], i) => (
{num} {name} {sev}
))} {/* Footer summary */}
4 CRITICAL 7 HIGH 1 MEDIUM ● SCANNING
); } function PageSolutionSmartcity({ navigate }) { const assetLayers = [ { layer: "Physical Security", color: "#ef3e5d", icon: "ph-camera", assets: [ { name: "CCTV IP Cameras", detail: "500+ units · Bosch & Vivotek" }, { name: "Video Analytics System", detail: "AI-based surveillance platform" }, ], }, { layer: "City Services", color: "#f59e0b", icon: "ph-traffic-sign", assets: [ { name: "Smart Streetlights", detail: "300+ units · Philips" }, { name: "Digital Signage & LED Controllers", detail: "City-wide display network" }, { name: "Smart Speaker System", detail: "City-wide public alert broadcasts" }, { name: "Smart Public Toilets", detail: "IoT sensor gateway controlled" }, { name: "Smart Bins", detail: "IoT sensor gateway controlled" }, { name: "Water Quality Monitoring", detail: "Sensor network with firmware" }, ], }, { layer: "Connectivity", color: "#7a5af0", icon: "ph-network", assets: [ { name: "OLT Switches", detail: "Araknis Networks · Core backbone" }, { name: "Enterprise Switches", detail: "Velocinet · Network fabric" }, { name: "Distribution Switches", detail: "NetVue · Distribution layer" }, ], }, { layer: "Facility Infrastructure", color: "#0e9e6e", icon: "ph-buildings", assets: [ { name: "Data Center PDUs", detail: "Eaton smart power distribution" }, { name: "Smart UPS Systems", detail: "Eaton · firmware-managed" }, { name: "Server BMCs", detail: "Dell out-of-band management interface" }, ], }, { layer: "Applications", color: "#5b8def", icon: "ph-browser", assets: [ { name: "Web-Based GIS System", detail: "Geographic information platform" }, { name: "Smart City Management System", detail: "Built by NASDAQ-listed integrator" }, { name: "Video Conferencing", detail: "Crestron Airmedia · meeting room infrastructure" }, ], }, ]; const findings = [ { num: "01", sev: "CRITICAL", icon: "ph-network", head: "OLT Switches on Factory Default Credentials", detail: "The optical line terminal switches forming the backbone of the city's entire network were running on unmodified factory credentials. A single breach would give an attacker full visibility and control over all network traffic.", asset: "ZTE OLT Switches", impact: "Complete network takeover", }, { num: "02", sev: "CRITICAL", icon: "ph-chip", head: "Server BMC Accessible via Default Credentials", detail: "The Dell web interface for baseboard management was reachable on default credentials — giving persistent out-of-band access below the operating system. A compromised BMC survives OS reinstalls and gives an attacker power, boot and hardware control.", asset: "Dell Server BMC", impact: "Persistent hardware-level access", }, { num: "03", sev: "CRITICAL", icon: "ph-map-pin", head: "GIS System: SQL Injection → Code Execution", detail: "The web-based GIS system had exploitable SQL injection vulnerabilities. When manually validated by the Redinent team, these escalated to full code execution on the server. The GIS platform holds maps, asset locations and infrastructure coordinates for the entire township.", asset: "Web-Based GIS System", impact: "Full server compromise · infrastructure data exposure", }, { num: "04", sev: "CRITICAL", icon: "ph-browser", head: "City Management Platform — Multiple OWASP Top 10 Violations", detail: "The city's primary management system — developed by one of the world's largest software companies (NASDAQ-listed) — had multiple OWASP Top 10 vulnerabilities allowing full administrative control. Vendor reputation is not a security guarantee.", asset: "City Management System", impact: "Full operational control by attacker", }, { num: "05", sev: "HIGH", icon: "ph-traffic-sign", head: "IoT Gateway Full Control via Hardening Vulnerabilities", detail: "The IoT gateway controlling 300+ streetlights had hardening vulnerabilities allowing full device control — all streetlights could be switched off or manipulated simultaneously. The same gateway architecture extended to smart toilets and waste management bins.", asset: "Streetlight IoT Gateway", impact: "City-wide service disruption", }, { num: "06", sev: "HIGH", icon: "ph-camera", head: "10% of Cameras Had Weak or Guest Credentials", detail: "Across the 500+ camera fleet, approximately 50 cameras had weak passwords or guest access enabled — providing direct RTSP stream access and device control to anyone on the network who attempted default credential login.", asset: "Bosch & Vivotek IP Cameras", impact: "Surveillance access · tenant privacy breach", }, { num: "07", sev: "HIGH", icon: "ph-camera", head: "70% of Cameras Failed Two or More Hardening Checks", detail: "HTTPS disabled in the web control panel, UPnP enabled, legacy protocols active. 350+ cameras across the fleet exhibited at least two hardening failures each — dramatically expanding the attack surface beyond credential issues.", asset: "Bosch & Vivotek IP Cameras (fleet-wide)", impact: "Mass attack surface exposure", }, { num: "08", sev: "HIGH", icon: "ph-video-camera", head: "Video Analytics System on Weak Credentials", detail: "The AI-based video analytics platform — which processes live feeds from all cameras — was running on weak or easily guessable credentials, exposing surveillance data for the entire township.", asset: "Video Analytics System", impact: "Surveillance data exfiltration · AI system manipulation", }, { num: "09", sev: "HIGH", icon: "ph-speaker-high", head: "Smart Speaker System — Full Device Control via Hardening Gaps", detail: "The city-wide public alert and speaker system had hardening vulnerabilities that allowed full control of the device. An attacker could broadcast arbitrary audio to the entire township — including emergency alert impersonation.", asset: "Smart Speaker / PA System", impact: "Public disinformation · panic generation", }, { num: "10", sev: "HIGH", icon: "ph-drop", head: "Water Quality Monitoring Firmware Unpatched", detail: "Firmware on the water quality monitoring sensor network had not been updated for an extended period — running versions with known published CVEs. Sensor data integrity and the control plane were both at risk.", asset: "Water Quality Monitoring System", impact: "Sensor data manipulation · public health risk", }, { num: "11", sev: "HIGH", icon: "ph-lightning", head: "Data Center UPS Running Exploitable Firmware CVEs", detail: "Eaton smart UPS units in the data center were running outdated firmware with publicly documented, exploitable CVEs. Attackers have demonstrated the ability to kill UPS power to data centers in real-world incidents.", asset: "Eaton Smart UPS", impact: "Data center power disruption · hardware damage", }, { num: "12", sev: "MEDIUM", icon: "ph-arrows-split", head: "Juniper Switches Failing CIS v8 Benchmarks", detail: "Network distribution layer Juniper switches had widespread CIS Controls v8 benchmark failures — insecure management protocols enabled, logging disabled, unnecessary services running. A significant hardening debt across the switching layer.", asset: "Juniper Distribution Switches", impact: "Lateral movement facilitation", }, ]; const sevColor = { CRITICAL: "#ef3e5d", HIGH: "#f59e0b", MEDIUM: "#5b8def" }; const sevBg = { CRITICAL: "rgba(239,62,93,0.12)", HIGH: "rgba(245,158,11,0.12)", MEDIUM: "rgba(91,141,239,0.12)" }; const sevBorder = { CRITICAL: "rgba(239,62,93,0.35)", HIGH: "rgba(245,158,11,0.35)", MEDIUM: "rgba(91,141,239,0.35)" }; const scenarios = [ { icon: "ph-lightning", head: "Malware via Streetlight Gateway", body: "The IoT gateway controlling 300+ streetlights has hardening vulnerabilities. An attacker gains full device control, pivots to the city management network, and deploys ransomware across the operational platform before anyone detects the intrusion.", }, { icon: "ph-eye", head: "Tenant Surveillance via Camera Credential Takeover", body: "50 cameras have guest access enabled. A threat actor targeting multi national software companies operations gains persistent RTSP stream access to facilities — months of intelligence on executive movements, visitor patterns and sensitive operations.", }, { icon: "ph-siren", head: "Public Alert Impersonation via Speaker System", body: "The city-wide public address system can be fully controlled by an attacker who exploits its hardening vulnerabilities. Emergency evacuation orders, air quality warnings, or false security alerts — broadcast to an entire industrial township.", }, { icon: "ph-database", head: "Infrastructure Intelligence via GIS Compromise", body: "SQL injection on the GIS platform escalates to code execution. An attacker now has every asset location, every underground utility, every CCTV position, every network node mapped — the complete physical blueprint of the township's critical infrastructure.", }, ]; const capabilities = [ { icon: "ph-camera", cap: "Camera firmware analysis — credential audit, hardening checks, OEM identification" }, { icon: "ph-network", cap: "Switch and OLT configuration security — CIS benchmark, default credential sweep" }, { icon: "ph-traffic-sign", cap: "IoT gateway and smart infrastructure — streetlights, bins, toilets, sensors" }, { icon: "ph-drop", cap: "Operational technology — water quality, environmental monitoring systems" }, { icon: "ph-lightning", cap: "Power infrastructure — UPS and PDU firmware CVE analysis" }, { icon: "ph-chip", cap: "Server BMC — out-of-band interface audit, default credential detection" }, { icon: "ph-browser", cap: "Web application layer — OWASP Top 10, API security, authentication review" }, { icon: "ph-map-pin", cap: "GIS and management platforms — SQL injection, authorisation bypass testing" }, { icon: "ph-speaker-high", cap: "Smart speaker and PA systems — hardening and access control review" }, { icon: "ph-video-camera", cap: "Video analytics platforms — credential security, data access controls" }, { icon: "ph-certificate", cap: "Compliance reporting — Meity CCTV advisory, STQC, NIC, NDAA" }, { icon: "ph-file-text", cap: "Remediation runbooks per asset class — prioritised by exploitability" }, ]; const buyers = [ { icon: "ph-city", head: "Smart City Authorities & SPVs", tag: "Primary Buyer", tagColor: "#ef3e5d", tagBg: "rgba(239,62,93,0.1)", tagBorder: "rgba(239,62,93,0.25)", desc: "India's 100 Smart Cities Mission cities and Special Purpose Vehicles operating city-scale IoT infrastructure. Redinent delivers Meity-aligned security assessments and STQC-compliant reporting.", points: ["Meity CCTV advisory compliance", "NDAA hardware audit across camera fleets", "City-wide IoT asset discovery", "SPV board-level risk reporting"], }, { icon: "ph-buildings", head: "Industrial Townships & SEZs", tag: "High Value", tagColor: "#f59e0b", tagBg: "rgba(245,158,11,0.1)", tagBorder: "rgba(245,158,11,0.25)", desc: "Private operators of technology parks, GIFT City-style developments, and industrial townships housing major enterprises — where a breach affects Fortune 500 tenant operations and reputation.", points: ["Tenant security SLA compliance", "OT and IT convergence audits", "Executive-grade risk reporting", "Incident response readiness"], }, { icon: "ph-wrench", head: "City Technology Integrators", tag: "System Integrators", tagColor: "#7a5af0", tagBg: "rgba(122,90,240,0.1)", tagBorder: "rgba(122,90,240,0.25)", desc: "The companies that design, build and hand over smart city platforms need a security sign-off before delivery. Redinent provides the independent security validation that protects integrators from post-handover liability.", points: ["Pre-handover security certification", "OWASP and application layer testing", "OT protocol security validation", "Client-facing security report"], }, ]; return (
{/* ── HERO ── */}
{/* Faded city background image */}
{/* Dark vignette — edges fade to dark, centre stays clear */}
{/* Left column — headline + meta (DC style) */}
Solutions · Smart Cities

A city full of Fortune 500 tenants.
Completely blind to its own attack surface.

Redinent deployed XIoT across one of India's largest smart city industrial townships — housing India HQs of world's largest software companies. What we found across 500+ cameras, 300+ streetlights and 14 asset classes should concern every smart city authority in the world.

{/* Meta rows — DC style */}
{[ ["Deployment scale", "500+ cameras · 300+ streetlights"], ["Asset classes", "14 across OT · IoT · IT · Web"], ["Critical findings", "4 critical · 7 high · 1 medium"], ["Compliance", "Meity · STQC · NDAA · NIC"], ["Tenants at risk", "World's largest software companies"], ["Disruption to ops", "Zero — non-disruptive protocol"], ].map(([k, v], i, arr) => (
{k} {v}
))}
{/* Right column — animated city audit console */}
{/* ── ATTACK SURFACE MAP ── */}
The attack surface map

Your CISO thinks they're
protecting a network.

They're actually protecting a city. Generic scanners see 2–3 of these 14 asset classes. Redinent covers all of them — across five layers that no single security tool was built to handle simultaneously.

{assetLayers.map((layer, li) => (
{layer.layer}
{layer.assets.map((a, ai) => (
{a.name}
{a.detail}
))}
))}
{/* vs generic scanner — charcoal theme */}
{[ { tool: "IT vulnerability scanner", sees: "Switches, servers, some cameras", misses: "OT gateways, IoT sensors, UPS firmware, BMC, web apps, speaker systems", highlight: false }, { tool: "OT / industrial scanner", sees: "SCADA, PLCs, Modbus devices", misses: "IP cameras, web applications, cloud-connected IoT, smart city management platforms", highlight: false }, { tool: "Redinent XIoT", sees: "All 14 asset classes across all 5 layers", misses: "Nothing on your network", highlight: true }, ].map((row, i) => (
{row.tool}
✓ SEES {row.sees}
{row.highlight ? "✓ COVERS" : "✗ MISSES"} {row.misses}
))}
{/* ── THE 12 FINDINGS ── */}
01 Real deployment · Actual findings

12 findings.
One township. Every layer.

{/* severity summary bar */}
{[["CRITICAL", 4, "#ef3e5d"], ["HIGH", 7, "#f59e0b"], ["MEDIUM", 1, "#5b8def"]].map(([sev, count, color]) => (
{count} {sev}
))}
{/* 3×4 finding cards — CCTV "Six reasons" style */}
{findings.map((f, i) => (
{f.num} {f.sev}
{f.head}

{f.detail}

ASSET: {f.asset} IMPACT: {f.impact}
))}
{/* ── IMPACT SCENARIOS ── */}
02 What would an attacker do with this?

Findings become
attack chains.

Individual vulnerabilities are rarely the end goal. Here is what a sophisticated attacker could chain together using only what Redinent found in one township deployment.

{scenarios.map((s, i) => (
{s.head}

{s.body}

))}
{/* ── CAPABILITIES ── */}
03 What Redinent covers

Every layer.
One assessment.

XIoT was purpose-built for environments where OT, IoT, IT and web application layers coexist on the same estate. No agent installation. No disruption to city operations. Zero cloud dependency.

{capabilities.map((c, i) => (
{c.cap}
))}
{/* Compliance strip */}
Compliance frameworks {["Meity CCTV Advisory", "STQC Empanelled", "NDAA Hardware Audit", "NIC Guidelines", "IEC 62443", "OWASP Top 10", "CIS Controls v8"].map((f, i) => ( {f} ))}
{/* ── WHO THIS IS FOR ── */}
04 Who this is for

Three buyers.
One common problem.

{buyers.map((b, i) => (
{b.tag}
{b.head}

{b.desc}

{b.points.map((pt, pi) => (
→ {pt}
))}
))}
{/* ── STATS ── */}
{[ { icon: "ph-camera", num: "500+", lbl: "Cameras Assessed", note: "AXIS and Vivotek IP camera fleet — firmware, credentials, hardening and ONVIF protocol audit." }, { icon: "ph-traffic-sign", num: "14", lbl: "Asset Classes", note: "OT, IoT, IT, physical security and web application layers covered in a single deployment." }, { icon: "ph-warning", num: "12", lbl: "Findings", note: "4 critical, 7 high and 1 medium severity — across every layer of the township's infrastructure." }, { icon: "ph-cloud-slash", num: "0", lbl: "Cloud Dependency", note: "XIoT runs entirely on-premise. No data leaves your city network. Air-gap deployments supported." }, ].map((s, i) => (
{s.num}
{s.lbl}

{s.note}

))}
{/* ── FINAL CTA ── */} Request a Smart City Assessment.
See every device. Secure every layer.} cta1="Request an Assessment →" cta2="Download: Attack Surface Checklist" cta1Page="contact" cta2Page="contact" contactContext="general-inquiry" />
); } window.PageSolutionSmartcity = PageSolutionSmartcity;