Seligdar strengthens industrial security with Positive Technologies products

On 28 July 2026, Positive Technologies reported that Russian polymetallic producer Seligdar had deployed two of its products. MaxPatrol VM is used to manage vulnerabilities, while PT Sandbox analyses attachments and protects corporate email from malware and sophisticated threats.

According to the vendor, the project has accelerated threat response and improved visibility into the protection of the production environment. The important point is that this is not merely another security application on employee devices. It establishes a repeatable process from identifying a weakness to verifying that it has been remediated.

Why the combination is useful

A vulnerability-management system identifies which assets and weaknesses create the greatest current exposure. A sandbox answers a different question: it opens a suspicious object in an isolated environment and observes its behaviour before the file reaches a production system.

Together, the products address two distinct attack paths:

• a known vulnerability in a server, application or network device;
• unknown or modified malware delivered by email.

These controls do not replace network segmentation, privileged-access management or monitoring of operational technology. They can, however, reduce manual triage and help a security team focus on events with a credible path to production impact.

What to measure after deployment

Product installation alone does not demonstrate that risk has fallen. A measurable programme normally tracks:

1. the share of critical assets with an accountable owner;
2. mean remediation time by severity;
3. expired risk exceptions;
4. time from the first malicious email to blocking similar objects;
5. scanning and monitoring coverage across office and production segments;
6. verification results after patches are applied.

Prioritisation should consider more than a CVSS score. Network reachability, exploit availability, the system’s role in a production process and the potential cost of downtime all change the practical risk. Our guide to Zero Trust architecture explains the wider control model.

Business conclusion

The project illustrates a move from isolated security tools to a managed cyber-resilience cycle. For an industrial enterprise, success is not the largest possible list of findings. It is a demonstrable reduction in the exposure window and a lower probability that an office-side incident can cross into production.

Before starting a similar programme, an organisation should map critical assets, define remediation deadlines and agree safe maintenance windows with production teams. Our report on cyberattacks against Russian industry provides additional context.

Source: the official Positive Technologies publication dated 28 July 2026; the original source is linked in the article metadata.