Oldcastle BuildingEnvelope

Oldcastle BuildingEnvelope manufactures architectural glass, glazing systems, and hardware across 85 facilities in five countries - North America's largest vertically integrated operation in the space. That footprint means a sprawling attack surface: industrial control systems running production lines, a supply chain web touching commercial and residential construction projects, and over 6,700 employees generating identity and access management complexity at scale. The product mix includes hurricane-resistant, blast-mitigating, and fire-rated glass - materials specified into critical infrastructure and high-security builds, making the data and IP involved non-trivial. Securing an industrial manufacturer of this size means dealing with the full stack: OT environments on the factory floor, enterprise IT across distributed facilities, and the vendor ecosystem that comes with operating in five countries. Aluminum framing systems, curtain walls, storefronts, skylights, entrance doors, and branded hardware - each product line has its own design data, customer specifications, and logistics pipelines. The threat model likely spans ransomware targeting operational continuity, supply chain compromise, and the kind of IP theft that matters when your glass goes into buildings designed to resist hurricanes and blast events. The company is headquartered in the United States with manufacturing and distribution operations spanning the U.S., Canada, and three additional countries. Security teams here aren't protecting an app - they're defending a physical production and distribution network where downtime hits fabrication schedules and project timelines directly.