Fueled by our OT‑specific threat intelligence enriched with the Threat Intelligence Expansion Pack from Mandiant, Nozomi Arc delivers automated cyber threat prevention without disrupting OT operations.
It keeps processes running safely while giving asset owners complete control via flexible threat response modes suited to diverse risk environments.
Nozomi Arc is a host-based security sensor that detects and defends against malicious or compromised endpoints. It sends collected data to Nozomi Guardian or Nozomi Vantage for further analysis and correlation.
Detect the use of USB devices and malicious HIDs
Correlate events with user’s behavior
Monitor local events for signs of suspicious activity
Detect, quarantine or delete malware and malicious software
Collect endpoint inventory, security and performance data
Arc also turns any endpoint into a lightweight network sensor by discovering nearby devices on the host’s subnet, tracking their behavior and detecting threats – without deploying Guardian sensors.
Passive analysis
Discover neighboring devices
Enrich asset data with active queries
Crown Jewels
Protect critical assets where network monitoring would by be overkill
Remote Substations
Avoid limited maintenance windows to deploy and other network hassles
Low Bandwidth, High Latency
Ideal for cargo ships, mining sites and other networks where cabling is impractical
Insider Threats
Accelerate forensics by correlating suspicious user activity with specific devices
Contract Technicians
Monitor a single active session on the host device while they’re connected