This third-party product review, written by Cybersecurity Insiders, evaluates Safous Industrial Secure Remote Access (I-SRA) for operational technology environments. It is for OT, security and plant engineering teams that need to give vendors and engineers remote access without weakening segmentation, and it covers the risk problem, the architecture, operational use and governance.
Download the PDF
Who Wrote It and What Was Evaluated
The review was published by Cybersecurity Insiders (2025). It looks at how Safous secures remote access to industrial systems now that vendor connections, remote diagnostics and global dashboards have eroded the air gap. It cites IBM as reporting that more than 50% of organizations had a third-party-related security incident in 2022, with 70% of those affecting OT systems.
Key Findings
- Purdue-aligned design: the Safous AppGateway sits in the OT-DMZ at Level 3.5 and brokers access, so users never connect directly to Level 3 and below.
- Outbound-only connectivity: traffic leaves the site encrypted with TLS over port 443 and is routed through customer-dedicated Private POPs.
- Identity first: federated authentication and MFA verify every request, with SSO, Active Directory or LDAP integration.
- Session control: just-in-time access, full session recording and supervised workflows for high-risk tasks.
- Legacy-friendly: agentless, browser-based access to PLCs, SCADA and unpatched systems, in connected or air-gapped environments.
- Governance: logs forward to SIEM platforms such as Splunk and QRadar, and policies can align with IEC 62443, NIST 800-82 and CMMC.
Frequently Asked Questions
Who wrote this review of Safous I-SRA?
Cybersecurity Insiders wrote and published the product review in 2025.
How does Safous I-SRA protect OT networks according to the review?
It places the Safous AppGateway in the OT-DMZ at Purdue Level 3.5 with outbound-only TLS connections, so remote users reach approved applications without direct access to Level 3 and below.
Which frameworks does the review say Safous policies can align with?
The review names IEC 62443, NIST 800-82 and CMMC, with logs forwarded to SIEM tools such as Splunk and QRadar.
Learn more: Safous Industrial Secure Remote Access, Third-party access, Regulatory compliance.
.png)
