VC Panel on Investing in ICS Security

### Overview At the S4 conference main stage, host Dale moderates a panel discussion featuring venture capital investors Patrick (representing ClearSky, a $300 million cybersecurity-focused fund) and Tyler (from Shell Technology Ventures / STV). The discussion examines the surge in venture and angel investment within industrial control systems (ICS) and operational technology (OT) cybersecurity. While deal flow has rapidly expanded from a few deals a year to dozens, both investors offer a realistic, critical assessment of the crowded market, explaining investment criteria, business hurdles, technology patterns, and long-term exit expectations.

### Key Topics - **Fund Structures and Investment Theses:** ClearSky operates as a security-focused fund with ties to NextEra Energy (Florida Power and Light), seeking financial ROI while leveraging deep engineering resources to safeguard critical infrastructure. STV operates two capital buckets: one targeting Shell's 'new energies ambition' (future fuels, renewables, mobility over horizon 2 and 3 timelines) and another funding technologies deployed into core operations (such as unconventionals/shale, drilling, and production). STV views industrial cybersecurity as horizontal 'connective tissue' enabling digital transformation, remote operations, and automation. - **Market Saturation and Lack of Differentiation:** Patrick notes he tracks nearly 30 companies competing with nearly identical architectures: network sniffing via taps, reverse-engineering proprietary ICS protocols, rule/threshold-based analytics, and baseline machine learning alerts. Investors find it difficult to discern true technical leaders when products function more as features rather than comprehensive, defensible platforms. - **Shift from Fear to Business Value:** Tyler and Patrick advise entrepreneurs to move away from security buzzwords ('threat', 'cyber', 'risk') and address the buyer's operational bottom line. Enterprise buyers and P&L owners invest in cost reduction, operational uptime, and enabling remote field operations rather than buying standalone security boxes. - **Sales Cycles and Industry Ecosystem:** The ICS domain faces sluggish, highly regulated enterprise sales cycles. Success requires navigating established industrial automation vendors (Honeywell, Schneider Electric, Emerson) and building go-to-market leadership (such as experienced CROs, VP of Sales, and CFOs) rather than relying solely on technical rockstars or threat intelligence backgrounds. - **Realistic Exit Valuations:** Panelists emphasize that unicorns are unlikely in ICS security. Most startups will experience acquisitions in the $40M–$70M range by dominant IT security platforms or industrial automation suppliers looking to incorporate niche functionality as features.

### Technical Details - **Network Appliance Limitations:** Both investors caution against relying on standalone proprietary hardware sniffers that decode legacy protocols (e.g., PLCs from 1995), warning that end-user engineers are fatigued by managing numerous disjointed monitoring boxes and consoles. - **Forward-Looking Architectural Trends:** Investors look for architectures aligned with IT/OT convergence, including containerized applications, Software-Defined Networking (SDN) for flexible control implementation, virtualization, and built-in security for next-generation wireless industrial networks, microgrids, low Earth orbit (LEO) satellite links, and cloud/edge industrial IoT (IIoT) analytics platforms.

### Takeaways - **Build for Future Infrastructures:** Security must be natively built into emerging technologies (renewables, distributed microgrids, remote automated operations) rather than retrofitting outdated legacy architectures. - **Address Buyer Economics:** Founders must move beyond 'founderitis,' build strong business teams, partner with key supply-chain automation vendors, and engage decision-makers who hold direct P&L accountability. - **Expect Strategic Consolidation:** Moderate return expectations (2x–3x) and feature consolidation are standard; successful serial founders use acquisitions as stepping stones for subsequent ventures.