Published 06/27/2025
What if we could trick cyberattackers into revealing their tactics without ever putting critical infrastructure at risk?
That’s the bold concept behind VirtualPLC, a startup emerging from Virginia Commonwealth University that is working to turn industrial cybersecurity on its head. With support from the Commonwealth Cyber Initiative’s (CCI) Central Virginia Node (CVN), VirtualPLC is developing a product that simulates industrial control systems (ICS) so convincingly that hackers cannot tell the difference.
It is not a deployed product yet, but it is one of several research-driven innovations that CVN is helping guide toward commercialization.
VirtualPLC: Deceiving Hackers, Defending Infrastructure
Founded by Irfan Ahmed, Ph.D., VirtualPLC aims to provide threat intelligence for critical infrastructure owners by creating virtual replicas of ICS environments. These are the systems that manage power plants, water supplies, and other essential services. Instead of fully replicating the physical setup, VirtualPLC focuses on mimicking how those systems communicate with the outside world.
“Remote attackers don’t see a factory floor, they see data,” said Dr. Ahmed. “If we can replicate the communication layer to look just like a real system, we can lure in attackers and learn from them without ever risking the real infrastructure.”
This approach allows security professionals to observe attacker behavior in a lifelike but safe environment. By understanding these interactions, asset owners can build more resilient defenses for their actual systems.
From Academia to Commercialization with CVN Support
The idea for VirtualPLC started in the lab, but the funding and encouragement from CVN helped Dr. Ahmed take the leap toward commercialization.
“Without this funding, I wouldn’t have even considered commercialization,” Ahmed said. “In academia, we publish our work and move on. But CCI CVN gave us the resources to think about turning our research into a real product.”
The funding enabled Dr. Ahmed to begin building out the technology with commercialization in mind. It also positioned VirtualPLC to begin pursuing additional funding and partnerships.
What Comes Next
VirtualPLC is still in development. The team is actively working to secure additional funding and plans to partner with an asset owner to conduct real-world testing. This pilot phase will be key in demonstrating the product’s effectiveness.
“We want to test it with one user,” Dr. Ahmed explained. “That successful case study could open the door for wider adoption.”
While the product is not yet available to the public, the progress so far shows how early-stage support can help transform research into a valuable tool for industry.
Supporting Innovation Across Virginia
VirtualPLC is one of many startups supported by the Commonwealth Cyber Initiative Central Virginia Node. CVN continues to help researchers and innovators turn their concepts into real-world solutions through funding, mentorship, and guidance.
Want to learn how CVN can help fund your startup or research project?
