Dispel launches Zero Trust Engine for OEMs to secure third-party remote industrial service access
Dispel announced the Dispel Zero Trust Engine for OEMs, a remote access platform for OEMs and machine builders that service customers' industrial equipment. It is already used at multiple OEMs, including ABB under ABB Care. The vendor cites Verizon's 2026 Data Breach Investigations Report, which says 61 percent of manufacturing breaches involve a third party, and positions the product against standing VPNs, jump hosts, shared credentials and inconsistent logging. This is a product announcement with no incident, vulnerability or threat actor activity described.
Technical Details
- Tiered Connection Suite (Browser Connect, Virtual Desktop, local application) on disposable, session-based infrastructure, so no standing VPN exposure.
- Sessions are scoped, time-bound and automatically recorded. Just-in-time access and MFA are enforced by default.
- Dispel Intelligence adds dynamic risk scoring per session. Dispel Identity ties sessions to a named technician through government ID and biometric verification.
- Dispel Compliance evaluates against NERC CIP, IEC 62443 and NIS2.
- Deployment tiers: Foundation (multi-tenant), Premium (single-tenant) and Advanced (on-prem or hybrid). Delivery is as Rapid-Deploy SaaS or a white-labeled OEM-owned platform.
Remediation
The article presents the product as a mitigation for third-party remote access risk: replace standing VPNs and shared credentials with just-in-time, MFA-enforced, recorded and attributable sessions.
Linha do tempo
-
Dispel launches Zero Trust Engine for OEMs to secure third-party remote industrial service access
ler a análise desta fonte ocultar
Dispel announced the Dispel Zero Trust Engine for OEMs, a remote access platform for OEMs and machine builders that service customers' industrial equipment. It is already used at multiple OEMs, including ABB under ABB Care. The vendor cites Verizon's 2026 Data Breach Investigations Report, which says 61 percent of manufacturing breaches involve a third party, and positions the product against standing VPNs, jump hosts, shared credentials and inconsistent logging. This is a product announcement with no incident, vulnerability or threat actor activity described.
Technical Details
- Tiered Connection Suite (Browser Connect, Virtual Desktop, local application) on disposable, session-based infrastructure, so no standing VPN exposure.
- Sessions are scoped, time-bound and automatically recorded. Just-in-time access and MFA are enforced by default.
- Dispel Intelligence adds dynamic risk scoring per session. Dispel Identity ties sessions to a named technician through government ID and biometric verification.
- Dispel Compliance evaluates against NERC CIP, IEC 62443 and NIS2.
- Deployment tiers: Foundation (multi-tenant), Premium (single-tenant) and Advanced (on-prem or hybrid). Delivery is as Rapid-Deploy SaaS or a white-labeled OEM-owned platform.
Remediation
The article presents the product as a mitigation for third-party remote access risk: replace standing VPNs and shared credentials with just-in-time, MFA-enforced, recorded and attributable sessions.