Free tool
OT Conduit / Firewall Ruleset Linter
Paste the firewall rules between your Purdue zones and this linter checks them against ISA/IEC 62443 zone-and-conduit practice — catching IT→OT any-any allows, inbound remote access into the control floor, conduits that skip the IT/OT DMZ, plaintext management into OT, control-protocol writes from outside the cell, and shadowed or overly-broad rules. It parses and lints entirely in your browser; no rule ever leaves the page.
0 rules · 0 allow · 0 deny
Formats: ACTION SRC -> DST proto/port or CSV src,dst,proto,port,action. Zones: L0 L1 L2 L3 DMZ L4 L5 or any. Lines after # are comments.
Paste your OT firewall rules above, or load the sample.
Parsing and linting happen entirely in your browser.