Secure remote privileged access company Cyolo Ltd. today announced Cyolo CPS Segmentation, a microsegmentation product that extends its platform beyond human-to-machine access into controlling how machines and systems communicate across critical infrastructure.

The offering targets a gap industrial operators have long acknowledged but rarely closed. Segmentation caps how far an intruder can travel after breaking into a network. Putting it in place has been the hard part. Older methods call for network redesigns and infrastructure changes and both bring downtime.

In plants and utilities that run around the clock, that’s a dealbreaker. Many operators put it off and relied on detection and response instead.

That tradeoff is getting harder to justify. Operations keep adding connections and artificial intelligence is speeding up attacks. Cyolo’s pitch is to box threats in before they move sideways and to do it without the rebuilds that sank earlier segmentation efforts.

CPS Segmentation runs the full segmentation lifecycle. It discovers assets, maps how they communicate, then helps teams build, test and enforce policy. The feature set includes shadow-access discovery, visual flow mapping, blast-radius analysis, intelligent grouping and policy recommendations. A simulation mode lets teams try changes before they go live. Everything sits on Cyolo’s zero-trust architecture, which the company says keeps sensitive data under customer control.

“We’ve pursued a single goal since Cyolo was founded, to help the organizations that keep our world running control every connection across their critical infrastructure,” said co-founder and Chief Executive Almog Apirion. “We started with human-to-machine access and now we’re bringing the same OT-native security principles to machine-to-machine communication control. As AI helps attackers move faster and farther, the ability to stop lateral movement and reduce blast radius has never been more crucial.”

Cyolo describes CPS Segmentation as the first secure connectivity platform built for critical infrastructure. The company positions it as the latest addition to a broader platform that also spans remote privileged access, identity security, malware detection, secure web access and endpoint security.

The launch continues Cyolo’s push deeper into operational technology. The company introduced Cyolo PRO, its OT-focused remote access product, in 2024 and expanded its privileged access platform with vendor-connection monitoring last year.

Cyolo is a venture capital-backed startup that has raised $85.2 million in funding over four rounds. Investors include National Grid Partners Inc., Glilot Capital Partners, Flint Capital, Differential Ventures Inc. and Merlin Ventures.

Image: Cyolo