ANDRITZ AG

ANDRITZ AG is a publicly listed industrial technology group headquartered in Graz, Austria, building the infrastructure that keeps critical sectors running: hydropower generation, pulp and paper mills, metal processing lines, and increasingly, carbon capture and green hydrogen plants. The attack surface here is not just corporate IT - it spans operational technology across more than 280 locations in over 80 countries, with automation systems and turnkey plant engineering baked into the product line. Revenue hit €7.9 billion in 2025, and the workforce sits at roughly 30,000. This is not a startup threat model; it is a sprawling, geographically distributed OT environment with legacy integration points and safety-critical processes. The technical domains - hydropower, metals forming, recycling systems, renewable energy solutions - mean security work touches both the digital layer and the physical one. Compromise in a pulp mill control system or a hydropower automation stack carries consequences that scale differently than a SaaS breach. The company's offerings range from individual pieces of equipment to fully integrated, turnkey plants, which means the security surface includes everything from embedded firmware in industrial gear to enterprise resource planning systems coordinating global supply chains. For security professionals, the challenge is architectural: defending environments where uptime and safety are non-negotiable, where OT protocols may not support standard security tooling, and where international operations introduce regulatory complexity across jurisdictions. The scope covers process automation systems that run continuously, environmental technology installations, and the software layers that orchestrate them. ANDRITZ operates across 80-plus countries, so incident response, access management, and threat intelligence all have to account for a genuinely global footprint.