NetWitness Extends Threat Detection Across Converged IT and OT Environments

NetWitness, a leader in threat detection and response, announced expanded operational technology (OT) visibility through a technology partnership with DeepInspect, a cybersecurity company specializing in industrial environments (OT). The integration between NetWitness and DeepInspect enables organizations to extend the detection, investigation, and response capabilities of the NetWitness platform into industrial environments where IT and OT systems increasingly intersect.

As industrial infrastructures become more connected to enterprise networks, operational systems are exposed to many of the same cyber threats targeting traditional IT environments. This convergence creates new security challenges for organizations that must monitor activity across both enterprise and operational networks while maintaining the reliability of critical systems.

The integration allows industrial protocol telemetry captured by the DeepInspect technology to be ingested directly into the NetWitness platform. NetWitness processes this data through its log and packet analytics capabilities, enabling security teams to correlate OT activity alongside traditional IT telemetry within a unified detection and investigation environment.

By extending its visibility into OT environments, NetWitness enables security teams to detect anomalies, investigate suspicious behavior, and conduct forensic analysis using both metadata and raw network traffic. This unified approach helps organizations identify threats that move between enterprise and operational systems an increasingly common attack path in modern infrastructure.

“Organizations can no longer treat IT and operational technology as separate security domains,” said John Pirc (JP), Chief Product and Technology Officer at NetWitness. “By extending NetWitness visibility into industrial environments, security teams gain the context they need to detect and respond to threats that span enterprise and operational networks.”

The integrated architecture also simplifies security operations center (SOC) workflows by consolidating alerts, telemetry, and investigation data into a single platform. This reduces operational complexity and enables analysts to respond more quickly to incidents affecting critical infrastructure.

“Unified visibility is essential for defending modern industrial environments,” added Pirc. “This integration strengthens our ability to deliver deep network visibility and advanced threat detection across the full attack surface.”

“We are proud to launch our innovative solution to a global stage with NetWitness.” said Marco Lombardi, CEO of DeepInspect. “The integrated solution meets the growing need for unified IT and OT security and has already proven its value in real-world deployments, meeting critical market demands and securing key industrial infrastructures, including a major railway operator.”