Nozomi Networks and cybersecurity solutions provider Sophos have entered into a strategic integration partnership with the aim of establishing an interlink between operational technology (OT) and enterprise IT security operations.
The two companies are working together to link the cloud-native, AI-powered OT and Cyber-Physical Systems (CPS) security platform, Nozomi Networks Vantage, with Sophos Fusion, the AI-native cybersecurity defense platform from Sophos. This integration enables SOC teams to have a unified view for detecting, investigating, and mitigating multi-vector cyber attacks across both IT and industrial control systems.
This is one of the earliest third-party integrations that has been rolled out on Sophos Fusion, demonstrating the company’s dedication to developing an open security ecosystem.
Tackling Vulnerabilities Across Domains in Critical Infrastructure
In light of rising attacks against industrial control networks and critical infrastructure by both nation-state attackers and financial ransomware attackers, the amount of targeted attacks on these domains is increasing at a steady pace. Modern industrial infrastructures depend greatly on remote access management and connected technologies; therefore, almost all outages result from a cyberattack within the enterprise IT environment.
Also Read: ChurnZero Launches Retrospective AI Agent to Automate Churn Analysis and Deliver Precision Insights for CS Leaders
Nozomi Networks OT telemetry, asset intelligence, and threat indicators provide a central viewpoint via integration into Sophos Fusion for security analysts. With the help of fusion, threat hunters can correlate anomalies within the industrial network along with security telemetry within the IT network in one console without context-switching through different software platforms.
“The intersection of IT and OT environments has long been misunderstood by the cybersecurity industry, leading to inefficiencies and potential danger for critical infrastructure,” said Matt Cowell, Vice President of Strategic Alliances at Nozomi Networks. “This partnership helps solve these problems by seamlessly integrating OT intelligence into IT security investigations so teams have the full picture when assessing their increasingly expanding attack surface.”
“Defenders need every resource they can to combat sophisticated threat actors. This partnership helps security teams easily assess OT and IT vulnerabilities in one place, allowing them to take action much faster,” said Chris Bell, SVP of Global Channel and Alliances at Sophos. “Following the launch of Sophos Fusion, this is a testament to our commitment to bring best-of-breed security technologies into a single defense system for superior threat detection, investigation, and response.”
Key Capabilities of the Joint Platform
• End-to-End Telemetry Correlation
Merges specialized OT data points with traditional IT endpoint, identity, and network log to track lateral movement across administrative and operational boundaries.
• Enhanced Threat Context & Remediation
Enriches security alerts with granular industrial asset details, enabling analysts to evaluate the severity and operational impact of potential threats accurately.
• Streamlined SOC Operations
Minimizes operational friction and manual investigative steps by housing IT and OT defense tools inside a single operational framework.
• SOAR-Driven Automated Orchestration Accelerates incident mitigation by orchestrating automated security playbooks across
converged IT and OT security controls.