.png)
What Is OsecT With Safous?
OsecT with Safous is an integrated OT security solution combining OT-native intrusion detection with governed remote access — deployed on-premises as an appliance, with no agents required on OT endpoints.
Designed for safety-first industrial environments, it gives operations and security teams continuous visibility into their OT networks and the access controls to act on threats safely, responsibly, and with a full audit record.
OsecT is the OT network monitoring and intrusion detection service from NTT DOCOMO BUSINESS. IIJ offers OsecT together with Safous as one integrated solution.
OT Networks Predate Modern Security
Production networks were built to prioritize safety, availability, and uptime – often decades before security monitoring or remote access were a consideration. Many are still running assets with no modern security baseline, legacy operating systems that can't be patched, and no reliable view of what's connected or communicating.
Security Tools Introduce OT Risk
Active scanning, agents, and frequent updates may be acceptable in IT. In OT, they can cause unplanned downtime, disrupt industrial protocols, and introduce the very operational risk they're meant to prevent. OT security requires passive, non-intrusive approaches from the ground up.
Visibility Alone Isn't Enough
Detection surfaces risk – but it doesn't govern who acts on it. Without a control layer, unmanaged access during investigations creates excessive privileges, compliance gaps, and accountability blind spots. Every detection event needs a governed response path.
Compliance Requires a Complete Evidence Trail
Auditors and regulators don't just want to know what happened – they want to know who did it, when, and under what authority. Without session recording, access attribution, and tamper-resistant logs tied back to detection events, compliance becomes difficult to demonstrate and even harder to defend.
Appliance-Based, On-Prem Deployment
All detection and access control runs on-premises via a dedicated appliance. Can run fully on-premises. No inbound exposure to OT networks. No agents required on OT endpoints.
OT-DMZ / AppGateway Architecture
Safous connects users to OT systems through an OT-DMZ and AppGateway – agentless, without placing endpoints on the production network or opening broad network access. OsecT monitors passively via mirrored traffic (SPAN/TAP), with zero impact on production traffic.
Multi-Site Management
Deploy across multiple facilities with centralized visibility and governance. Manage OT security operations at scale without sacrificing site-level control.
OsecT: OT Visibility & Threat Detection
Visibility & Baseline
Passive industrial protocol monitoring
Automatic asset discovery
Real-time topology mapping
Baseline comparison & change diffs
Detection & Alerts
Rogue and unknown device detection
OT-aware anomaly detection
Behavior and signature-based detection
Safous: Governed Remote Access
Access Control & Enforcement
Identity-based access control
Just-in-time least-privilege permissions
MFA and approval workflows
Agentless access via OT-DMZ / AppGateway
Supports air-gapped and isolated OT environments
Audit & Accountability
Full session recording and logging
Clear attribution of actions to individuals
Tamper-resistant audit logs
Discover & Baseline
OsecT maps OT assets and establishes a baseline for normal network behavior.
Detect Risk
OsecT identifies anomalies, unknown devices, and suspicious activity.
Approve Access
Safous brokers scoped access based on the detected risk and active policy.
Investigate & Remediate
Engineers and vendors connect securely with least-privilege access.
Record & Audit
Every action is logged, recorded, and linked back to the detection event – visibility with accountability, not just alerts.
At a Glance
OsecT with Safous
Download a concise 2-page overview of architecture, capabilities, and deployment.
How to Implement Agentless Privileged Remote Access for IT and OT: Step by Step
How to Implement Agentless Privileged Remote Access for IT and OT: Step by Step
Nov 10, 2026
7
min read
Industrial Cybersecurity Solutions: Categories and How to Evaluate Them
Industrial Cybersecurity Solutions: Categories and How to Evaluate Them
Nov 05, 2026
5
min read
Remote Access Compliance: How to Meet Audit Requirements Without Agents or VPNs
Remote Access Compliance: How to Meet Audit Requirements Without Agents or VPNs
Oct 29, 2026
3
min read