Sophos and Nozomi Networks have announced a new integration that brings OT security directly into the IT SOC, targeting the growing threat to critical infrastructure where IT compromises often trigger OT outages.
The partnership integrates Nozomi Networks Vantage, its cloud-native, AI-enabled OT and IoT security platform, with Sophos Fusion, Sophos’ AI-native cybersecurity defense system. It is one of the first major third-party integrations since the launch of Sophos Fusion, signaling Sophos’ push for an open ecosystem that unifies best-of-breed tools.
Closing the IT-OT Visibility Gap
As organizations connect more industrial assets and enable remote management, attackers — from nation-states to cybercriminals — are increasingly targeting operational technology (OT) and cyber-physical systems (CPS). The integration addresses a long-standing gap where IT and OT security operate in silos.
Under the integration, Nozomi’s OT telemetry, asset intelligence, and threat data flow directly into Sophos Fusion, where it is correlated with IT security data from endpoints, network, cloud, and identity sources — without switching consoles.
“The intersection of IT and OT environments has long been misunderstood by the cybersecurity industry, leading to inefficiencies and potential danger for critical infrastructure,” said Matt Cowell, VP of Strategic Alliances at Nozomi Networks. “This partnership helps solve these problems by seamlessly integrating OT intelligence into IT security investigations so teams have the full picture when assessing their increasingly expanding attack surface.”
Key Benefits for SOC Teams
- Unified correlation: Security data across OT, endpoint, network, cloud, and identity in one view
- Richer investigations: OT context enriches IT investigations for better decision-making
- Greater SOC efficiency: Fewer manual processes and less console switching
- Automated response: Enrichment and response via Security Orchestration, Automation and Response (SOAR) workflows
“Defenders need every resource they can to combat sophisticated threat actors. This partnership helps security teams easily assess OT and IT vulnerabilities in one place, allowing them to take action much faster,” said Chris Bell, SVP of Global Channel and Alliances at Sophos.
The integration aims to help defenders detect, investigate, and respond to threats spanning both IT and OT environments faster and with greater context.
