Dispel launches Zero Trust Engine for OEM remote industrial service

Dispel announced the launch of its Zero Trust Engine for OEMs to secure remote industrial service. Dispel will demonstrate the solution at the Gartner IT Symposium/Xpo 2026 in booth 842.

Verizon’s 2026 Data Breach Investigations Report shows that manufacturers experience 61% of breaches from third parties, up from the 48% cross‐industry average and a 60% year‐over‐year increase. According to Industrial Cyber and EIN Presswire, Most OEMs already have remote access, but few have a solution built to resist third‐party inspection, which leaves standing VPNs and jump hosts as constant exposure. The shift from ‘secure connectivity’ to ‘secure operations’ noted in the Gartner Market Guide for CPS Secure Remote Access causes security reviews to stall contracts that once closed on trust.

Dispel’s Zero Trust Engine is offered in three tiers: Foundation, which is multi‐tenant and custodian‐based; Premium, a single‐tenant option for high‐security needs; and Advanced, an on‐prem or hybrid version that reaches into customer‐owned infrastructure. The engine includes a Tiered Connection Suite that provides Browser Connect, Virtual Desktop or a local application, and technicians get the suitable access method via this single platform.

Deploying the engine takes less than an hour at each site and onboarding requires under an hour of training. OEMs can begin with a Rapid‐Deploy SaaS that goes live in days with minimal setup, or they may run a white‐labeled OEM‐owned platform fully inside their own security perimeter. Because both deployment paths share the same architecture, a pilot never requires re‐platforming to scale, and users have grown from pilot to hundreds of sites within months.

The engine’s infrastructure is disposable and session‐based, eliminating standing VPN exposure so attackers cannot map a static attack surface. Each session has a scope and time limit, is logged automatically, and shows who connected, what actions occurred and when access ended before the customer’s security team inquires. The engine applies just‐in‑time access and multifactor authentication by default, instead of treating them as an afterthought. Live topology visibility spans every facility, gateway and device, ensuring no outage goes unnoticed.

Dispel Intelligence applies Dynamic Risk Scoring to every session from login to disconnect, highlighting risk before it turns into an incident. When protecting high‐value assets or meeting high‐risk thresholds, the platform links each session to a verified technician using government ID and biometric data, which removes liability from shared credentials.

Dispel Compliance constantly checks the platform against standards such as NERC CIP, IEC 62443 and NIS2, reducing multi‐week contract reviews to same‐day audit readiness.

It works with existing OT gear across over 65,000 TCP/IP protocols, such as SSH, RDP and VNC. Closed systems like Rockwell FactoryTalk, Siemens TIA Portal and Mitsubishi GX Works need a translator to work alongside the platform. OT security products already deployed, such as Nozomi Networks, Dragos, Armis, Forescout and TXOne Networks, can receive risk data from sessions and assets.

Its power comes from an industry‐leading Moving Target Defense SD‑WAN fabric. The platform adheres to standards such as NIST and IEC 62443. It provides secure remote access, data streaming and a unified OT DMZ.

The platform offers advanced capabilities such as MTD, IAM, fine‐grained access controls, isolated sessions, just‐in‑time entry, password vaulting, multifactor authentication, encryption, network segmentation and continuous threat monitoring. Dispel’s internal data show the platform cuts yearly operating expenses by roughly $42,000,000.

The platform lowers OT audit preparation expenses by $1,200,000 annually. It allows deployment of a single facility each day for a month. Connecting a vendor takes less than 30 seconds.

ABB deploys the technology through its ABB Care service. “faster service response, real-time support and a secure foundation” “Enabling machine builders to scale service and deliver faster SLAs should not require a patchwork of tools” It can be deployed as SaaS or as a fully white‐labeled OEM‐owned platform.