
Six charging back-ends, one weakness: the February 2026 CISA advisories
On one day, CISA published six advisories on charging platforms that all listed missing authentication on charger connections.
Add EV-charging detections to the service you already run for mid-size operators and depots.

OCPP traffic means little to a general SOC ruleset. An unsigned firmware job or one ID on two connections needs a rule written for it.
The Open Charge Alliance’s guide says operators shall set up security monitoring, and that’s hard to staff around the clock.
Each item carries its status today. The first GridSEAL release is targeted for about Q2 2027.
Alerts that name the rule that fired.
Roadmap, third releaseWhat the alert means and what to do first.
RoadmapBuilt for a managed service.
RoadmapIn a study of 325 DC chargers, 12% supported TLS on this link.
ISO 15118-20 applies to new or renovated points from 1 January 2027.
It’s a networked computer on a public site, and its firmware is an update path.
The Cyber Resilience Act binds charger makers.
CISA issued at least 15 advisories on these platforms from January to October 2026.
NIS2 binds operators, including their supplier risk.
Vehicle-to-grid adds commands that move real power, so each one needs limits.
GridSEAL Grid is on our roadmap.

On one day, CISA published six advisories on charging platforms that all listed missing authentication on charger connections.

How a charger proves who it is to your back-end, what each profile protects, and what no profile covers.

Chargers on a Russian motorway stopped working during the invasion of Ukraine. The reported cause was a supplier’s remote access, and much remains unconfirmed.
We’d like to hear what your analysts would need from a charging detection.