Cybersecurity vendor Nozomi released an automated threat response tool designed for operational environments.

Updated as part of the mainline Nozomi suite, Nozomi Arc is described as a security and network monitoring solution for operational technology (OT) endpoints. It’s also touted as providing automated threat prevention capabilities for IoT environments, and is compatible with Windows, Mac, and Linux.

The platform functions in three modes, with Detection Mode enabling continuous, non-intrusive monitoring to support audits and compliance activities. Quarantine Mode, meanwhile, can isolate harmful files while retaining them for detailed forensic evaluation.

Finally, Delete Mode eliminates malicious files immediately to contain threats and avert potential damage.

Nozomi Arc’s prevention engine draws data from Nozomi Networks Threat Intelligence, which includes insights from Mandiant Threat Intelligence. The engine processes indicators of compromise using "yet another ridiculous acronym" (YARA) rules for malware pattern matching, and structured threat information expression (STIX) for standardized threat intelligence sharing.

The release also handles security information and event management (SIEM)-compatible rule events using the SIGMA log-based detection format, which is designed for localized behavioral assessment.

Nozomi claimed the solution is a response to an increase in targeted attacks on OT environments, specifically control systems, operator workstations, and human-machine interfaces (HMIs). According to the vendor, automated endpoint protection can reduce mean time to respond, establish unified oversight across network and endpoint landscapes, and also improve regulatory compliance. Operations teams can benefit from faster threat containment with limited impact on ongoing production activities.

In a recent interview with SDxCentral, Nozomi CRO Kevin Isaac said one issue the firm was focused on solving was alert fatigue form too much information.

“One of the things we’ve been able to do with our AI is to use that to reduce alert fatigue and tune the environments so that you could actually hear the signal-to-noise ratio much more effectively," claimed Isaac.

Nozomi Arc is the first major release from Nozomi after its acquisition by Mitsubishi Electric last month.

Financial details of the deal weren’t revealed, though analyst reports placed it around $880 million. Once completed, Nozomi will serve as a wholly owned subsidiary, operating independently of Mitsubishi Electric.