Mitsubishi Electric has developed a new OT security solution that embeds threat monitoring directly into industrial equipment — moving industrial cybersecurity from reactive patching to active, built-in defense. Announced in Tokyo on October 22, 2026, the solution leverages the technology of Nozomi Networks, the US OT-security specialist that became a wholly owned Mitsubishi Electric subsidiary in January 2026. Commercial launch is planned as an extension of Nozomi Arc™ during the fiscal year ending March 2028.
For factories and critical-infrastructure operators, the message is clear: cybersecurity is becoming a built-in property of the controller itself, not an afterthought bolted onto the network.
The Announcement at a Glance
-
What: a new operational technology (OT) security solution for industrial equipment, integrating Nozomi Arc's host-based monitoring into devices including Mitsubishi Electric controller products.
-
Core capabilities: USB monitoring, malware detection, quarantine and removal, and software management — running natively on the equipment.
-
Visibility: connects to Nozomi's OT/IoT asset-visibility and threat-detection platform for site-wide, centralized monitoring and early detection of abnormal behavior.
-
Timeline: commercial launch as a Nozomi Arc extension during the fiscal year ending March 2028; first product shown as a reference exhibit at JIMTOF 2026 (Tokyo Big Sight, October 26–31).
-
Context: Nozomi Networks became a wholly owned subsidiary in January 2026; Mitsubishi plans deeper integration with its Serendie™ digital platform.
Why Industrial Networks Need Embedded Defense
OT environments are notoriously hard to secure: they mix decades-old devices with modern controllers, run specialized protocols, and were designed for availability rather than visibility. Individual assets, their communications, and abnormal behavior often simply cannot be monitored — which is exactly the gap attackers exploit.
Two forces are now changing the economics. First, IoT adoption and digital transformation have connected factory floors that were previously air-gapped, expanding the attack surface. Second, regulation: the European Union's Cyber Resilience Act imposes mandatory cybersecurity requirements on products with digital elements, with certain requirements applicable from September 2026 and full application scheduled for December 2027. Manufacturers that embed security into products now will be selling into a compliance-driven market.
"As the risk of cyberattacks targeting OT environments continues to rise, the need to embed security capabilities directly into equipment and devices is becoming increasingly critical," said Satoshi Takeda, Senior Vice President, CDO, and Group President, Digital Innovation at Mitsubishi Electric.
From Patch Management to Active Defense
Traditional OT security followed a familiar cycle: a vulnerability is disclosed (ICS advisories now arrive weekly), vendors prepare firmware patches, operators schedule downtime to apply them. That model breaks down when equipment runs for 20 years and patching windows are rare. The Mitsubishi–Nozomi approach flips the model: the device continuously monitors its own USB ports, software state, and runtime behavior, detecting and quarantining threats in place — while feeding telemetry to a site-wide platform that spots abnormal patterns across the whole OT estate.
This mirrors a broader shift among major automation vendors: security is moving from an external overlay to an intrinsic product property. The same convergence trend is visible in plant power infrastructure, where Siemens acquired supercapacitor maker Skeleton Technologies to embed power buffering into its electrical portfolio — vendors are racing to own more of the vertical stack.
What Industrial Automation Buyers Should Do
Embedded OT security will take years to flow through product cycles, but buyers can prepare now:
-
Map your OT assets. You cannot defend — or upgrade — what you have not inventoried. Asset visibility is the foundation both for security and for spare-parts planning.
-
Tighten removable-media policy today. USB monitoring is a headline feature for a reason: removable media remains a top infection vector in factories. Restrict it now, without waiting for new hardware.
-
Track firmware versions per device. The solution's software-management capability points to a future where knowing each controller's firmware state is a compliance requirement, not housekeeping.
-
Plan hardware refresh windows. Controllers purchased in the next 1–2 years should be evaluated for embedded-security readiness. When refreshing, reliable surplus and tested equipment suppliers help bridge gaps without forcing premature rip-and-replace.
Hardware availability and security readiness increasingly intersect: as recent component shortages showed — MLCC lead times have stretched to 52 weeks — planning refresh cycles early matters more than ever.
Key Takeaways
- Mitsubishi Electric's new OT security solution embeds USB monitoring, malware detection, quarantine, and software management directly into industrial equipment, launching commercially by March 2028.
- The technology builds on Nozomi Networks, fully acquired in January 2026, and connects to its site-wide OT/IoT visibility platform.
- The EU Cyber Resilience Act (full application December 2027) is turning embedded security into a market-entry requirement.
- The industry's security model is shifting from reactive patching to continuous, device-level active defense — buyers should start with asset inventories and USB policy today.
Frequently Asked Questions
What is OT security?
OT (operational technology) security protects industrial control systems — PLCs, drives, sensors, SCADA networks — from cyber threats. Unlike IT security, it must guarantee physical safety and uptime, which is why approaches like embedded monitoring and threat quarantine are gaining adoption over traditional patch-only models.
When will Mitsubishi Electric's OT security solution be available?
Commercial launch is planned during the fiscal year ending March 2028, as an extension of Nozomi Arc™. The first product incorporating the solution will be shown as a reference exhibit at JIMTOF 2026 in Tokyo from October 26 to 31, 2026.
What is Nozomi Arc?
Nozomi Arc is a host-based security sensor from Nozomi Networks — a US OT-security company fully acquired by Mitsubishi Electric in January 2026 — that detects and mitigates threats originating from compromised or malicious endpoints. The new solution extends Arc's monitoring directly into industrial equipment such as controllers.
Sources: Mitsubishi Electric news release, October 22, 2026 · Japan Stock Intel analysis