Dispel Company Review: Secure remote access and identity-controlled connectivity for OT systems
Dispel provides secure remote-access technology for operational-technology and industrial-control environments. Its automation relevance is controlled access for engineers, operators and external service teams, including documented collaboration with Mitsubishi Electric. It is a software and connectivity provider, not the manufacturer of the machines being accessed.
Engineering verdict
Dispel is relevant when industrial organizations need to govern remote support across sites and suppliers. Its identity and access approach, combined with a moving-target-defense architecture, offers a specific alternative to unmanaged persistent remote connections. The practical result depends on deployment design, permissions, operating procedures and integration with the organization’s existing security controls.
Company at a glance
Company detail | Verified scope |
Company | Dispel |
Technical focus | Secure remote access and identity-controlled connectivity for OT systems |
Role | Industrial cybersecurity software and managed remote-access platform provider |
Platform role and industrial partnerships
Dispel’s published material describes secure remote access for industrial operations and a collaboration with Mitsubishi Electric. The ATC catalogue represents that industrial-access solution rather than a robot or physical drive. Distinguish a technology partnership from ownership or blanket compatibility. A deployment still needs the exact supported endpoints, network arrangement, software components and division of support responsibilities defined for the intended customer environment.
Identity, access and changing infrastructure
The manufacturer describes zero-trust access and moving target defense as elements of its platform. These terms should translate into concrete deployment behavior: who can connect, what resources can be reached, how authorization is granted and when access expires. A changing remote-access infrastructure is not a substitute for correct permissions. Evaluate what happens to an active session when a user loses authorization or an industrial asset is removed from scope.
OT network integration
Industrial networks can contain long-lived equipment, vendor engineering tools and restrictions on agents or software changes. Document which assets are reached, the permitted protocols and how traffic crosses the site boundary. Check latency and connectivity requirements against the actual maintenance tasks. Remote diagnostics and file transfer may tolerate conditions that interactive commissioning does not. Avoid assuming that connectivity to one controller proves compatibility with every device or engineering workflow.
Session evidence and operational responsibility
Define the required audit records, retention, identity linkage and review responsibilities. Assess how vendor access is approved and how an urgent support request is handled outside normal hours. Where recording or monitoring is part of the proposed arrangement, establish exactly which activities are captured. Security evidence is useful only when the organization can retrieve and interpret it and has a defined response to unexpected access or behavior.
Cybersecurity and machine safety boundaries
Controlled remote access does not validate a machine’s safety functions or make remote motion inherently safe. Separate security authorization from operational permission to operate equipment. The site needs a defined process for maintenance states, local coordination and recovery if the network or remote session fails. A remotely reachable system must retain the appropriate local controls and fault behavior for its process and physical hazards.
Alternatives, rollout and commercial terms
Compare Dispel with a governed industrial VPN, a controlled jump-host arrangement or another OT remote-access platform using the same identity, logging and site requirements. Include deployment, user and site scope, support, availability and exit procedures in the proposal. Pilot realistic vendor workflows before a broad rollout. The meaningful outcome is controlled, supportable access with operational acceptance evidence, not a marketing claim that any technology eliminates all cyber risk.
Representative products in the ATC catalogue
These internal catalogue entries show the product families covered on All Things Cobots. Related variants or historical listings are not a count of unique current manufacturer SKUs.
Selection checklist
Decision | Evidence to request |
Access policy | Define users, assets, privileges, approval and expiry. |
Network deployment | Validate protocols, connectivity, latency and site-boundary design. |
Operational evidence | Specify audit records, retention and incident responsibilities. |
Machine boundary | Keep remote security authorization separate from safe machine operation. |
Frequently asked questions
Does Dispel manufacture the industrial equipment it connects to?
No. Its reviewed role is a secure remote-access and OT cybersecurity platform provider. Equipment manufacturers and controls vendors retain their own product responsibilities.
Does the Mitsubishi relationship imply universal compatibility?
No. It establishes a documented collaboration. The particular devices, tools, protocols and deployment architecture still need confirmation.
What does zero-trust access need to mean in a purchase?
Specify identity verification, resource-level permissions, approval, expiry and revocation behavior rather than relying on the label alone.
Does moving target defense replace access governance?
No. Infrastructure changes and access policy address different issues. Permissions, endpoint scope and administrative procedures remain essential.
Can a secure session make remote machine motion safe?
No. Cybersecurity controls do not replace local operating procedures or machine-safety functions. Remote support must fit the site’s defined operational states.
What should an OT access pilot test?
Use real vendor tools and authorized tasks, then test connectivity, latency, revocation, audit retrieval and recovery from session or network interruption.
Which commercial terms deserve attention?
Confirm supported sites and users, deployment components, service availability, support, logging and retention scope, renewal conditions and migration or exit arrangements.
When is Dispel a useful shortlist candidate?
It is relevant when an industrial organization needs governed remote support across equipment, vendors or sites and can evaluate the full identity, network and operating model.
