Integrity360 launches managed OT security services

Integrity360 has launched a new portfolio of managed OT security services, extending its existing operational technology security practice.

The services are aimed at organisations that need ongoing security management in industrial and operational settings, rather than one-off consulting projects or assessments. Demand has grown for managed support in environments such as manufacturing, utilities, transport and building automation.

Operational technology systems often require a different approach from conventional IT security because equipment can remain in service for long periods and cannot always be patched or taken offline without affecting production or critical processes. In those cases, organisations may need to rely on other controls to reduce risk while keeping systems available.

Integrity360's new portfolio is organised into five service areas: posture management, access security, network security, threat detection, and resilience and response.

Managed OT Security Posture is designed to help organisations identify assets in OT environments, assess their importance, and track vulnerabilities and exposures over time. It also includes remediation and mitigation support where traditional patching is not practical.

Managed OT Access Security focuses on controlling access for employees, contractors and remote users. It covers identities, privileged access and remote connectivity for operational systems.

Managed OT Network Security addresses communications and network infrastructure in OT settings. This includes segmentation within OT networks and between IT and OT environments, alongside management of network security controls.

For threat monitoring, Integrity360 has introduced Managed OT Threat Detection, configured specifically for operational environments. Organisations can use it as a dedicated OT monitoring service or combine OT detections with broader IT security telemetry in a single model.

The fifth area, Managed OT Resilience & Response, is intended to support both preparation for cyber incidents and the response to them. It includes incident response support, playbooks and preparedness exercises to help organisations recover while limiting disruption to operations.

The portfolio also includes reporting and control mapping aligned with security standards and frameworks relevant to OT environments. Governance across the five service areas is supported through compliance-ready reporting and risk-based assurance.

Different model

OT threat detection and response can require a different operating model from IT security because automated containment actions may have wider consequences when applied to operational equipment. Integrity360 will work with customers to establish response playbooks that define how its security operations teams interact with plant and OT engineering teams when threats are identified.

Brian Martin, Director of Product Management at Integrity360, described the differences between the two environments and the shift in customer demand.

"OT environments are increasingly targeted, but securing them is quite different from securing traditional IT. You may be dealing with equipment that has been running for years and you cannot simply patch or switch off without affecting the physical process it supports.

"We're also seeing more customers asking for help managing OT security on an ongoing basis. That means moving beyond individual assessments or projects and helping them continually understand their exposure, monitor for threats and prepare for how they will respond," Martin said.

The new services build on a broader OT security practice that already includes consulting and professional services in governance, risk and compliance, auditing, offensive security, engineering and incident investigation.

Integrity360 has expanded that practice over the past year after acquiring French OT security specialist Holiseum in 2025. The company now operates across the UK, Europe, Africa and Canada, with about 900 employees across 16 regional locations.

Martin said the challenge in OT security is avoiding operational disruption while responding to cyber threats.

"With OT security, response must take account of what the technology is controlling. Taking automated action against a compromised laptop is one thing. Taking equipment offline when it is part of a production line or critical process is very different.

"That is why the managed service combines security monitoring with an understanding of the operational environment. The aim is to give customers the information and support they need to respond to a threat without creating a bigger operational problem," Martin said.