Trustwave launches OT security portfolio with Nozomi Networks

Trustwave has announced the launch of a new portfolio of Operational Technology (OT) security services, developed in collaboration with Nozomi Networks, aimed at helping organisations strengthen defences for critical infrastructure and industrial operations against cyber threats.

The OT services bring together Nozomi Networks' monitoring and analytics capabilities with Trustwave's managed detection, response, and security expertise.

This combination is intended to provide protection for organisations operating in complex and high-risk environments, particularly as sectors such as energy, utilities, transportation, manufacturing and maritime become increasingly targeted by cybercriminals.

Market context

Ransomware remains a significant concern, with Trustwave's research noting an 80 percent increase in ransomware attacks on the energy and utilities sector.

As OT and IT continue to converge, organisations are exposed to a broader attack surface, requiring dedicated solutions that span both environments.

"It is difficult to protect what you can not see. As technology advances, we have listened to security leaders and observed in the industry how boundaries between OT and IT increasingly are coming together. Industrial control systems, supply chain systems, internet of things, MedTech and many more industries are tackling a diverse technology ecosystem across OT visibility, risk management, defence, and resilience," Kory Daniels, Chief Information Security Officer, Trustwave, said.

"With this offering, Trustwave is rolling up the sleeves in taking on the OT challenges with the industry by bringing enhanced threat exposure management, detection and response outcomes," said Kory Daniels, Chief Information Security Officer, Trustwave."

Service detail

The OT services portfolio covers multiple security capabilities.

This includes architecture design that creates a security roadmap, safe penetration testing for legacy and modern OT systems, and OT security monitoring with a co-managed security operations centre (SOC).

The SOC integrates security information and event management (SIEM) systems with major OT security platforms, including those from Nozomi Networks, Claroty, Dragos, and Microsoft Defender for IoT.

Other components include the integration of unique threat feeds and analytics from SpiderLabs, supporting detection, response and proactive threat hunting.

Consulting services are also offered, guiding clients across their OT security maturation, from risk assessments to incident response readiness and compliance with security frameworks such as NIST CSF and ISA/IEC 62443.

Resilience and compliance

Clients will be able to reduce cyber risk by engaging in continuous offensive and defensive security programmes, obtain actionable visibility across OT assets and vulnerabilities, and align internal security programmes with widely used industry and regulatory standards.

Building resilience against disruptive threats is a core aim of the new offering, with a focus on optimising technology investments and improving use of both existing and new security platforms.

Long-term development

Trustwave has indicated the OT service range will continue to expand, with planned features including OT security monitoring with managed detection and response (MDR), advanced asset and vulnerability discovery, deployment and management of OT sensor technology, tailored tabletop exercises for incident preparedness, and OT-specific incident response planning and programme development.

According to both organisations, the partnership leverages Trustwave's global experience in managed security services and Nozomi Networks' recognition in the OT and Internet of Things (IoT) security spaces to deliver these tailored services.

Trustwave's SpiderLabs division will underpin these offerings, providing intelligence from its threat research and hunting activities.

These insights will inform both the operational security solutions and the professional services provided to clients working to protect critical infrastructure from an evolving threat landscape.