Agile Defense vs Dispel

About Dispel

Dispel sells OT secure remote access, connecting vendors, OEMs, and operators to critical systems and data. Dispel replaces legacy remote access tools with a unified platform purpose-built for OT. Dispel says many industrial organizations still depend on IT-centric tools like RPAM, jump servers, and VPNs for remote access, and that these tools were not built for today's OT. Dispel connects internal and external users to ICS/OT assets such as PLCs, HMIs, and SCADA. Dispel says it delivers purpose-built OT SRA for operators, engineers, and vendors, with tailored connection methods and scalable deployment.^[1][2][4][5]

Dispel Zero Trust Engine replaces jump servers, VPNs, and IT PAM tools. Dispel says every connection with Dispel Zero Trust Engine takes under 30 seconds. Dispel says its remote access supports all 65,000+ TCP/IP protocols and OT systems. Dispel says vendor onboarding needs no IT ticket and no persistent credentials, and scales to a 100-vendor surge. Dispel delivers a tiered connection suite with Browser Connect, Virtual Desktop, and Local Application options tailored to every user. Dispel Zero Trust Engine includes a lightweight app with pre-connect posture checking. Dispel says one connection option is OEM compatible, including ABB, Rockwell, Mitsubishi, and more.^[5]

Dispel says its infrastructure rotates between every session, leaving AI-driven attacks nothing to map or return to. Dispel Zero Trust Engine uses single-use pathways that are destroyed at disconnect. Dispel Zero Trust Engine can be deployed in cloud, on-prem, and hybrid models. Dispel says a deployment can go live in 3 hours and scale to 100 sites in 90 days. Dispel offers full local deployment via Dispel Site Console. Dispel provides the flexibility of customer-cloud and fully on-premises deployments.^[18]

The Dispel Wicket is the edge gateway installed on-premises that connects an installation to the Dispel Zero Trust Engine and enforces local security controls. Wickets enable secure zero trust remote access, while also allowing data collection and streaming from multiple IIoT and equipment assets to cloud services and servers, all within a single unit. Wickets can be installed at an OT DMZ, in the cloud, and on IT systems. Dispel Wickets are industrial fanless edge gateways deployable in a server racks, cabinets, VESA, and DIN mounts. Wickets can run on Ubuntu environments deployed in VMWare. Dispel also offers hardware for Wickets. Wickets are fully integrated with Mitsubishi Electric industrial devices including the iQ-R Series WinCPU R102WCPU-W. Dispel has tested the SEL-3350 line for Wicket deployments.^{[7][11][19][20]}

Session Forensics and Dynamic Risk Scoring are built into the same remote access session. Dispel tracks AAL at every login, with 11-signal risk scoring that surfaces anomalies in real time. Dispel Intelligence pulls existing Nozomi or Dragos device risk data directly into the access decision. Dispel delivers a 24/7 OT SOC as a service that monitors every connection and session. Dispel's OT-aware analysts watch every remote session, escalating alerts to your existing SIEM or SOAR.^[8]

Dispel Identity adds IAL2 through government ID validation and a biometric match. Dispel Identity extends in-person-grade verification to remote sessions, confirming a real, verified person is behind every third-party connection. Dispel says identity verification fires only when the risk warrants it, by user type, asset risk score, behavioral threshold, or geography. Dispel Identity works with Microsoft Entra, Okta, PingIdentity, SAML, OIDC, and hybrid environments. Clients choose US or EU processing for identity verification, and both meet GDPR, BIPA, and eIDAS requirements.^[9]

Dispel Compliance scores live configuration against NERC CIP, NIST, IEC 62443, and NIS2 simultaneously. Dispel exports timestamped evidence as an OSCAL Component Definition, plus CSV and PDF summaries. Dispel lists supported frameworks as NIST SP 800-53 Rev 5, NERC CIP, IEC 62443-3-3, NIS2 (EU 2024/2690), NIST CSF 2.0, and SANS ICS 5 Critical Controls. Dispel says Industrial Data Streaming enables secure, real-time transfer and industrial data integration across operational, diagnostic, and system-level sources. Dispel OTFusion is a patented OT consolidation solution that unifies applications, operating systems, and services into a single secure environment. Dispel says customers can start with a single application or data stream and scale as results come in.^{[5][10][11][12]}

Dispel names manufacturing, utilities, and energy. With Dispel's Secure Remote Access, Seadrill employees no longer have to fly out to their vessels. Dispel describes Watercare, which supplies drinking water and wastewater services to over 4 million people in New Zealand. Dispel says it adheres to SOC 2 Type 2 and ISO 27001. The company states its features are designed against NIST 800-52, 800-82, NERC CIP, and IEC 62443. Dispel includes 24/7 global support.^{[3][4][5][10][11][12][18]}