Dispel and Tenable integrate OT asset and vulnerability intelligence into zero-trust remote access decisions
Dispel announced an integration between Tenable One OT Exposure and the Dispel Zero Trust Engine, its OT secure remote access platform. The integration feeds Tenable's real-time OT/IoT asset and vulnerability intelligence into every remote access decision. It is a product announcement with no vulnerability, incident or threat actor involved. It targets the gap between security, operations and GRC teams by giving them one shared view of asset risk and access activity.
Detalhes técnicos
- Tenable's asset characteristics, configuration, behavior and vulnerability profile sync automatically into the Dispel Zero Trust Engine, so access policies reflect the real state of the environment.
- Dispel Session Forensics evaluates sessions from login to disconnect, tracking authentication strength and behavioral baseline to surface shared-credential and vendor-sprawl patterns.
- Session risk and device risk are combined into a green, yellow or red rating. For example, a green user on a red device may call for over-the-shoulder monitoring or a locked-down connection type.
- Vendor access to patch a flagged vulnerability runs through just-in-time approval windows and recorded, disposable sessions.
- Dispel Compliance documents access in real time and exports audit evidence for NERC CIP, NIST, IEC 62443 and EU NIS2.
- The integration is available to joint customers and supports Tenable cloud, on-premises and hybrid deployments.
Remediação
No remediation applies. The article describes a defensive capability, not a threat.
Linha do tempo
-
Dispel and Tenable integrate OT asset and vulnerability intelligence into zero-trust remote access decisions
ler a análise desta fonte ocultar
Dispel announced an integration between Tenable One OT Exposure and the Dispel Zero Trust Engine, its OT secure remote access platform. The integration feeds Tenable's real-time OT/IoT asset and vulnerability intelligence into every remote access decision. It is a product announcement with no vulnerability, incident or threat actor involved. It targets the gap between security, operations and GRC teams by giving them one shared view of asset risk and access activity.
Technical Details
- Tenable's asset characteristics, configuration, behavior and vulnerability profile sync automatically into the Dispel Zero Trust Engine, so access policies reflect the real state of the environment.
- Dispel Session Forensics evaluates sessions from login to disconnect, tracking authentication strength and behavioral baseline to surface shared-credential and vendor-sprawl patterns.
- Session risk and device risk are combined into a green, yellow or red rating. For example, a green user on a red device may call for over-the-shoulder monitoring or a locked-down connection type.
- Vendor access to patch a flagged vulnerability runs through just-in-time approval windows and recorded, disposable sessions.
- Dispel Compliance documents access in real time and exports audit evidence for NERC CIP, NIST, IEC 62443 and EU NIS2.
- The integration is available to joint customers and supports Tenable cloud, on-premises and hybrid deployments.
Remediation
No remediation applies. The article describes a defensive capability, not a threat.