Xona and Forescout Unite to Revolutionize Critical Infrastructure Cybersecurity
Summary
- Partnership Overview: Xona Systems and Forescout are working together on security for critical infrastructure.
- Focus on OT Security: The deal targets operational technology (OT) environments such as plants and utilities.
- Remote Access Solutions: Secure remote access is central, to keep out unauthorized users.
- Combined Products: Forescout’s device visibility is paired with Xona’s user access controls.
- Industry Impact: Utilities, manufacturers and other infrastructure operators are the main audience.
Xona and Forescout pair up on OT access
Critical infrastructure operators are under growing pressure to lock down the systems that run their plants. Xona Systems sells secure user access tools. It has now partnered with Forescout, known for automated device visibility and control, and the pair is going after operational technology (OT) environments in energy, utilities and manufacturing.
Why OT is hard to secure
OT systems run the physical processes behind utilities and factories, and many were built decades ago with no thought of attackers. Patching them is hard. The partnership combines Forescout’s visibility and control with Xona’s access technology, giving operators one view of who and what connects.
Remote access is the weak spot
Remote access is the weak spot. Vendors and engineers need to connect from outside, and every connection is a possible way in. Xona enforces strict user access controls so only authorized staff reach sensitive systems, while Forescout watches the devices that connect and flags unknown ones.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What the integration does
Combined, the products show operators what is on the network and help catch threats in real time, without slowing the plant. That last part is the usual objection.
Who benefits
Utilities, oil and gas companies and manufacturers stand to gain most. Outages there spread.
What operators should do
The partnership reflects a broader push to secure OT remote access. Operators should start by listing every remote connection into their plants, removing the ones nobody uses and putting the rest behind strong authentication and logging. Products like these help with that, but the inventory comes first.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.