Industrial cybersecurity firm Nozomi Networks Inc. today announced an updated cybersecurity solution that automates threat response in operational environments to give users robust, automated threat prevention capabilities for operational technology endpoints.

The update to Nozomi Arc, which first launched in 2023, sees the introduction of three operational modules, Detection, Quarantine and Delete, that give users flexibility based on their risk tolerance and operational needs.

The Detection Mode offers non-disruptive monitoring for audits and compliance, the Quarantine Mode blocks malicious files while preserving them for forensic analysis and the Delete Mode instantly removes malicious files to prevent further damage.

The upgraded version of Arc also features OT-tailored threat intelligence integration powered by Nozomi Networks Threat Intelligence and further enhanced by Nozomi’s Threat Intelligence Expansion Pack, powered by Mandiant Threat Intelligence. Indicators of compromise are delivered in Yet Another Recursive Acronym (YARA), Structured Threat Information Expression (STIX) and Signature-based Intrusion Detection (SIGMA) formats to enable effective local behavioral analysis.

Nozomi Arc is natively integrated into the Nozomi Networks platform for OT, internet of things and cyber-physical systems protection, allowing organizations to unify detection, response and orchestration workflows from endpoint activities to wireless communications.

With automated endpoint protection, Nozomi says that security teams can accelerate mean time to response, gain unified visibility across networks and endpoints, and strengthen compliance posture. Operations teams also benefit from rapid containment of threats with minimal disruption to production.

“Industrial networks are under escalating attack, and traditional IT cybersecurity automation tools aren’t safe or viable in OT environments,” said co-founder and Chief Product Officer Andrea Carcano. “With Nozomi Arc threat prevention, we are empowering customers to – at their discretion – safely and automatically block and contain threats directly at the endpoint. And we intend to extend automated threat prevention capabilities across the Nozomi Platform in the future.”

Nozomi was previously in the news in September when it announced that it had agreed to be acquired by Mitsubishi Electric Corp., a major supplier of industrial equipment.

The acquisition deal values Nozomi at around $1 billion, with Mitsubishi Electric paying $883 million for the shares in the company it doesn’t currently own. Mitsubishi was already an investor in Nozomi and is believed to have had about $117 million worth of shares in the company before the acquisition was announced.

The acquisition is expected to close by the end of the calendar year. Nozomi will continue to operate under its current brand as an independent subsidiary of Mitsubishi Electric.

Photo: Nozomi Networks