TXOne Networks Reinvents Cyber Defense with SageOne Breakthrough

By John King, CISSP, PMP, CISM   Published: 06/12/25   Updated: 10/30/26   3 min read

TXOne Networks Reinvents Cyber Defense with SageOne Breakthrough

At a glance

A new SageOne release

TXOne Networks announced an expanded version of its SageOne platform on June 3, 2025. SageOne is the company’s governance platform for operational technology (OT), the systems that run factories and critical infrastructure. The new release targets a common problem in OT: there are far more known vulnerabilities than a small team can patch, and shutting down a production line to apply a fix is rarely an option.

Risk-based patching for plants

How SageOne works

TXOne says most vulnerability tools use scoring borrowed from IT, which flags thousands of high-priority flaws in a large plant. SageOne instead assesses each asset, prioritizes flaws with a proprietary risk score called VSAR (Vulnerability Situational Awareness Rating), and recommends a fix such as full patching, virtual patching or micro-segmentation that will not stop production.

TXOne Networks CEO Dr. Terence Liu said SageOne was “conceived and purpose-built from the ground up to address the unique cybersecurity needs of OT networks and systems—not IT.”

Why plants need a different approach

Making the flaw list manageable

Manufacturing and critical infrastructure depend on OT systems that often run for decades and cannot be patched on a normal IT schedule. Attackers know it. A security team for a large plant may be ten people or fewer, so most alerts from conventional tools go unaddressed.

SageOne narrows that list to the vulnerabilities that need immediate action. Security teams can then put their limited time where it counts without halting operations.

One console for TXOne products

Central control

SageOne also serves as the console for TXOne’s other products: Stellar for endpoint protection, Element for security inspection and Edge for network defense. Bringing them together gives teams one view of the security posture of their operations.

Liu described the release as one that gives OT teams “actionable insights that lead to achievable, impactful outcomes.”

What OT teams should look at

The SageOne update reflects a broader shift in industrial security toward fixing the few vulnerabilities that matter most, instead of chasing every alert.

OT teams evaluating it, or any similar tool, should test how it scores their own assets, check whether recommended fixes respect maintenance windows and confirm it works with the controllers and operating systems already on the plant floor.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.