The attack surface is physical, operational, and increasingly digital. Cypress Creek Renewables develops, finances, owns, and operates utility-scale solar and energy storage assets across 28 U.S. states. With more than 850 projects commercialized and 19GW of total capacity, the company runs a vertically integrated model - construction, operations, maintenance, and 24/7/365 monitoring - where the convergence of IT and OT is not theoretical. It's the grid edge, and it's live.
Founded in 2014 with a team of 400+ professionals, Cypress Creek's operational technology environment spans generation sites, storage systems, and the monitoring infrastructure that ties them together. The threat model for an independent power producer of this scale includes SCADA compromise, supply chain integrity across project construction, and the integrity of real-time telemetry from distributed assets. These are not hypothetical risks for a company that owns and operates what it builds.
The company's core values - Care, Courage, Creativity, Conviction, and Collaboration - signal an internal culture around responsible development and an owner's mindset. For a cybersecurity team, that means working with an organization that has skin in the game on every asset it connects to the grid.
