Nozomi Networks Inc. and Sophos Ltd. today announced a partnership that pushes operational technology telemetry from Nozomi’s Vantage platform into Sophos Fusion, the artificial intelligence-native defense system launched in July.

It’s one of the first significant third-party integrations Sophos has disclosed since Fusion launched. Sophos has said the system supports more than 500 third-party integrations.

Vantage is Nozomi’s cloud-hosted platform for monitoring industrial control systems and other connected equipment. It handles asset discovery and vulnerability management in environments where security teams typically have thin visibility. Under the integration, Vantage asset data, threat detections and alerts show up in Fusion alongside the endpoint and identity signals Sophos already pulls off the corporate network. Analysts can work both sides without changing consoles.

Security orchestration and automation playbooks will also be able to act on the combined data, the companies said.

“The intersection of IT and OT environments has long been misunderstood by the cybersecurity industry, leading to inefficiencies and potential danger for critical infrastructure,” said Matt Cowell, vice president of strategic alliances at Nozomi Networks. “This partnership helps solve these problems by seamlessly integrating OT intelligence into IT security investigations so teams have the full picture.”

Chris Bell, senior vice president of global channel and alliances at Sophos, said the integration puts OT and IT vulnerabilities in front of defenders in a single place.

Nozomi and Sophos both make the case that industrial outages often begin on the IT network. Routing plant-floor data to the analysts who already watch everything else is the fix they are selling. Transportation absorbed more ransomware than any other sector last year, according to a February report from Nozomi’s research arm. The same report put industrial wireless security in poor shape. Roughly 98% of the networks it examined still authenticated devices with pre-shared keys.

Nozomi has run this play before. It piped Mandiant threat intelligence into its own platform in 2024, then shipped an expansion pack built on Mandiant data later that year in the other direction.

Mitsubishi Electric Corp. paid paid $883 million for the shares it did not already own for Nozomi in a deal that closed in January. Nozomi has promised customers that a vendor-neutral roadmap survives the change of ownership.

Sophos has belonged to Thoma Bravo since 2020. Its $859 million purchase of Secureworks Corp. closed in February 2025, and Fusion carries much of that managed detection and response business.

Image: Nozomi Networks