Critical infrastructure access control for the sites everyone depends on
Critical infrastructure access control from Alcatraz uses facial authentication to verify every person entering substations, treatment plants, and energy facilities. Outdoor-rated Rock X readers work rain or shine at remote unmanned sites, integrate with your existing access control system via Wiegand or OSDP, and process all biometric data on the device.
What is at stake
When a substation is breached, the consequence is not a stolen laptop. It is a regional outage, a boil-water notice, or a pipeline shutdown that cascades into the public’s daily life. Physical intrusions at electrical infrastructure are a documented and recurring problem in the US, and regulators respond to incidents with scrutiny that lasts years.
Most of these sites share the same weakness. They are remote, often unmanned, and protected by a card reader that will open for anyone holding the right piece of plastic. A badge found in a truck or shared between contractors defeats the entire perimeter.
Alcatraz replaces that assumption with verification. The door opens for a verified, enrolled person, and only that person, with real-time tailgating detection with video covering anyone who follows them in.
Security requirements across sectors
Energy, chemical, water, and pipeline operators face sector-specific security frameworks and audit regimes, and nearly all of them converge on the same operational demands: control who can access critical assets, keep records that prove it, and detect unauthorized entry when it happens.
Alcatraz supports those requirements directly. Every entry is an authenticated event tied to a verified person, logged in Rock Cortex with audit-ready reporting. Tailgating detection covers the unauthorized-entry case that card logs miss entirely, and 2FA, badge plus face, hardens the doors your security plan designates as most critical.
Compliance language stays honest: Alcatraz produces the evidence your audits require, it does not paper over gaps.
Why biometrics for utilities
Remote unmanned sites. There is no guard to check faces at a substation. Rock X is the check: it verifies the person at the door and refuses everyone else, with 3D liveness detection blocking photo and mask spoofing attempts that unmanned sites invite.
Built for the outdoors.Rock X is outdoor-rated and works rain or shine. Perimeter gates, yard doors, and shelter entrances get the same sub-second authentication as an office lobby.
Contractor-heavy workflows. Utilities run on contractors. Opt-in web enrollment gets crews into the system in minutes, roles and permissions scope them to the right sites, and offboarding is instant and complete.
Audit trails that hold up. Every entry is an immutable record tied to a verified person. When a regulator or investigator asks who accessed a site, the answer is a report, not a reconstruction.
Deployment sites
Deployment sites across the network
Electrical substations
Substations are the canonical unmanned critical site: high consequence, no staff, and weather exposure year-round. Rock X mounts at the control house or gate and authenticates faces rain or shine, so entry requires a verified person, not a key or card that could be anywhere. Tailgating detection with video gives your operations center evidence when someone follows a legitimate crew through, and every visit is logged to the person.
Water treatment facilities
Water utilities balance public accessibility with the fact that chemical storage and SCADA rooms sit a few doors from the lobby. Alcatraz lets you tier access: 1FA facial authentication at operational doors, 2FA at chlorine rooms and control rooms. Contractor enrollment through Rock Cortex handles the maintenance vendors that cycle through treatment plants, with permissions that expire when the contract does.
Badge plus face at critical doorsOil and gas sites
Compressor stations, tank farms, and processing sites combine outdoor conditions with contractor-heavy operations. Rock X handles the environment while facial authentication handles the churn: crews enroll once and authenticate hands-free at every authorized site, and a badge left on a dashboard no longer opens anything. Entry records give site security a defensible answer to who was inside the fence during any incident window.
Outdoor deployments in harsh conditionsTelecom hubs
Central offices, cell site shelters, and network hubs are distributed by design, which makes credential management the weak point. With Alcatraz, one enrollment covers every authorized hub, and revoking a departing technician takes one action in Rock Cortex instead of a hunt for keys and cards. Sub-second authentication keeps emergency response fast when a technician needs in at 3 am.
5M+
Employees protected by Alcatraz across all industries
91%
Customer satisfaction
200%
New-customer growth year over year, as of April 2026
Why biometrics
Verification, not possession
Alcatraz verifies the actual person. 3D liveness detection prevents spoofing with photos, screens, or masks, which matters most at remote doors nobody is watching. For your highest-consequence assets, run 2FA: existing badge plus face, true multi-factor at the door itself.
It also scales across a distributed footprint. Enrollment is opt-in and takes seconds, and Rock Cortex manages profiles and permissions across every site, so one action covers a crew working ten substations.
No guard, still verified
At an unmanned site the reader is the only witness. A face cannot be lent, cloned, or left on a truck dashboard.
Rain or shine
Rock X is outdoor-rated, so perimeter gates and yard shelters authenticate as fast as an office lobby.
Contractor churn handled
Crews enroll in minutes, get scoped to the right sites, and lose access the moment the engagement ends.
Processing stays on device
All processing happens on the device. Templates are encrypted, no face images are stored, and biometric data never flows to a cloud.
Use cases
Every entrance type
Door
Control houses, SCADA rooms, and chemical storage get sub-second facial authentication with tailgating detection, in 1FA for operational speed or badge-plus-face 2FA at doors your security plan flags as critical.
Turnstile
Plant perimeter turnstiles authenticate crews hands-free at shift pace, ensuring only enrolled workers cross the fence line while entry logs capture every person individually.
Mantrap
For control rooms and the most consequential assets, a biometric mantrap enforces one verified person per cycle with 2FA at both doors, eliminating piggybacking entirely.
Benefits
Why critical infrastructure teams choose Alcatraz
Verification where no one is watching
At unmanned sites, the reader is the only witness. Facial authentication ensures the door opens for a verified enrolled person, and tailgating detection with door video documents anyone who tries to follow them in, giving operations centers real events with real evidence.
Hardware that survives the site
Rock X is outdoor-rated and authenticates in under a second, rain or shine. Substation gates, plant perimeters, and yard shelters get biometric verification without shelters, enclosures, or excuses about the weather.
Drop-in with your existing ACS
Rock and Rock X sit in line via Wiegand or OSDP between the reader position and the panel, working with platforms like Genetec, LenelS2, and Johnson Controls. Your panels, monitoring, and procedures stay. Verification gets added.
Proof from the field
Global tech leader retrofits secure data facilities
A major technology company upgraded its data centers with Alcatraz to strengthen critical infrastructure protections. The deployment delivered tailgating detection, robust privacy compliance, and best-in-class dual-factor authentication across secure environments.
Power system operator secures mission-critical facilities
The operator of New York’s energy grid deployed Alcatraz for secure access to control rooms and critical sites. The platform enabled 2FA, tailgating detection, and straightforward enrollment, supporting compliance while preparing for future exterior use cases.
Pipeline company enhances headquarters access control
A leading North American energy company implemented Alcatraz at its headquarters turnstiles to provide fluid, frictionless access. The deployment delivered secure entry without complex integrations, with potential expansion to additional sites across 40 or more states.
Major telecom firm deploys Alcatraz for 1FA and 2FA
A major telecommunications company rolled out Alcatraz to enable frictionless yet secure access across large facilities. Supporting both 1FA and 2FA, the system lets employees, contractors, and visitors move through secure areas while maintaining compliance.
Secure the sites that cannot fail
Your highest-consequence sites are protected by the oldest assumption in security: that the person holding the badge is the person it was issued to. Alcatraz retires that assumption. Deploy outdoor-rated facial authentication at your most critical gates and doors first, on the access control system you already run, and expand from there.
FAQ
How does facial authentication work at remote unmanned critical infrastructure sites?
Rock X authenticates the enrolled person’s face at the door in under a second, entirely on the device, and releases the door through your existing panel via Wiegand or OSDP. No guard, no network round trip for the biometric match, and no entry for anyone who is not enrolled and verified.
Can Alcatraz readers handle outdoor conditions at substations and plants?
Yes. Rock X is outdoor-rated and works rain or shine, built for perimeter gates, substation control houses, and yard shelters. It delivers the same sub-second, hands-free facial authentication outdoors that the Rock delivers indoors, on the same Rock Cortex management platform.
How does critical infrastructure access control handle contractor turnover?
Through opt-in web enrollment and role-based permissions in Rock Cortex. Contractors enroll in minutes, get access scoped to specific sites, and lose it instantly when the engagement ends. No cards to recover from crews, and no orphaned credentials that still open a substation gate.
Does Alcatraz help utilities with security audit and compliance evidence?
Yes. Every entry is an immutable record tied to a verified person, and Rock Cortex reporting produces audit-ready logs that support evidence collection for sector security frameworks. Tailgating events are captured with door video, documenting unauthorized-entry attempts that card-based logs never see.
Is biometric access control at utility sites a privacy problem for workers?
No. Enrollment is opt-in, processing happens on the edge device, and biometric data is stored only as encrypted, non-reconstitutable templates. No photos or videos of faces are kept. Workers are authenticated at doors they are authorized to use, which is verification, not surveillance.