Nozomi Networks Launches Compass to Bring OT Asset Management Closer to Real-Time

Industrial organisations are increasingly able to identify vulnerabilities and other risks across operational technology (OT) environments within minutes. Acting on those findings, however, can still depend on spreadsheets, IT ticketing systems and manual processes that were not designed around the safety and operational requirements of industrial environments.

Nozomi Networks is looking to address that gap with Nozomi Compass, an OT-native asset and service management platform designed to connect real-time asset intelligence with workflows for managing and documenting operational changes. The platform is built on Nozomi Networks’ first-party OT and IoT asset data and is intended to provide organisations with a current system of record for their operational environments. It combines asset information with workflows covering change planning, approvals, execution and compliance evidence.

“Nozomi Compass underpins our vision to provide a single source of truth for visibility, threat detection, governed workflows, compliance evidence, and trusted AI-enabled operational decision-making,” said Andrea Carcano, CEO and Co-Founder of Nozomi Networks. “Until now, operators have been working with an ineffective IT-native toolset to service their OT assets. As industrial organizations incorporate AI automation to keep pace with today’s threat and regulatory landscape, they cannot live in the unknown. Compass is the foundation that allows teams to move quickly with confidence.”

Moving Beyond Spreadsheets and IT-Centric Workflows
A key focus of Compass is the management of changes within environments where an incorrect or poorly timed intervention can have consequences beyond conventional IT downtime. The platform incorporates OT-specific context, including asset relationships, safety criticality, process dependencies and operational history. This information is intended to help teams assess proposed changes, record approvals and document what was ultimately carried out.

The approach also reflects the growing use of AI in vulnerability discovery and operational security. As automated tools increasingly identify risks at a faster pace, organisations need corresponding processes to determine which actions can safely be taken and how those actions are documented. Nozomi says Compass is designed to provide that governance layer, allowing AI-driven and autonomous workflows to operate with operational and threat context while retaining human oversight.

Compliance Evidence Built Into the Process
Compass will also provide continuously generated compliance evidence mapped to frameworks including NERC CIP, IEC 62443, NIS2 and TSA. Rather than relying solely on periodic manual collection, the platform is designed to maintain an ongoing record of changes, approvals, controls and remediation activity. This could give operators a more complete audit trail of how risks were assessed and addressed.

The platform’s planned capabilities include:

• OT system of record: A central source of current OT and IoT asset information based on Nozomi’s real-time asset data.
• OT-native workflows: Processes designed around industrial environments, including safety requirements, asset relationships and lifecycle history.
• Governed change management: Risk and safety context, approvals, consequence-based risk scoring and compensating controls to document decisions and actions.
• Continuous compliance evidence: Evidence mapped to major OT and critical-infrastructure frameworks.
• Enterprise and AI integration: Connections with EAM, CMDB, ITAM, ITSM, SIEM and SOAR platforms, while making contextual OT data available to AI-driven tools.

“OT and IT service management have always spoken different languages,” said Moreno Carullo, Co-founder and CTO at Nozomi Networks. “Nozomi Compass is purpose-built around how industrial operations work, including safety windows, process dependencies, and physical consequences, so teams can finally govern change and prove compliance without forcing OT data into an IT-shaped box.”

Extending Nozomi’s OT Security Platform
Compass also extends Nozomi Networks’ broader platform strategy by bringing asset and service management closer to the company’s existing cyber-physical security capabilities.

The company says Compass uses the same real-time asset intelligence that underpins Vantage, its cyber-physical security platform, giving organisations a common source of asset and security information rather than maintaining separate OT and IT-oriented records.

Nozomi Networks says Nozomi Compass is scheduled to become available to its customers in January 2027.