Remote Access to ICS

Made simple, secure, and 10x faster.

  • Same-Day Deployment

  • Scales on Demand

  • Full Session Recording

Industry-recognized technology

What we do

Everyday easy access.

Designed to delight your operators.

Dispel connects you to your ICS equipment, wherever it is, in 15 seconds. Let your team have remote access that is safe, simple to use, and wonderfully fast.


Dispel condenses the whole process and encrypts it from start to finish, so it's like having jumphosts but you don't have to worry about it. All the magic is behind, so the operator doesn't need to see it.

Will PerezDirector of Information Security at ConnecticutWater

An operator connecting to a water pump (shown in real time).


Introducing

Access for your vendors.

Designed to keep you safe and sane.

Your vendors need access to update ICS equipment. Let them in, get them out, record what they do, and never, ever, have them cross your corporate network again. Dispel ensures they see only what they absolutely need.

Automatically grabbing virtual desktops for a contracted team at log in.

Behind the Scenes

How Dispel works.

Easy to implement, easier to use.

A User logs into the Dispel application and selects the facility they want access to. The Dispel application is either downloaded natively or provided through a Dispel virtual desktop.

In the background, the User is connected to a customer-specific Moving Target Defense Software Defined Wide Area Network (an MTD SD-WAN) which Dispel's engine builds and maintains. The MTD SD-WAN brings the User to a Wicket ESI, positioned at each facility.

Wicket ESIs reject all inbound connection attempts, establishing connections with MTD SD-WANs through outbound only methods. Wicket ESIs can be hardware or a virtual machine, and provide user-specific whitelisted access to equipment inside of each facility.


The buy-in from leadership was easy because they saw how easy it was for Service Delivery to use. I didn't even have to explain it.

Will PerezDirector of Information Security at ConnecticutWater

Integrations

Dispel works with what you already use.

If it speaks TCP/IP, we can reach it.

Was your industrial control system installed before you entered middle school? If it has a port on it, we can probably find a way to talk to it.

Some of the ICS providers we remote access to

  • General Electric

  • Honeywell

  • Rockwell Automation

  • Omron

  • Inductive Automation

  • Emerson

  • Siemens

  • ABB

  • Alstom

  • Yokogawa

  • Schneider Electric

  • Walchem

This does not represent an endorsement or affiliation between said companies and Dispel.

ICS remote access tested and trusted by companies around the world

Security

Fundamentally, we’re a security company.

Your safety guides everything we do.

At Dispel, we believe in security transparency so, for details on our security posture, please visit our (extensive) security page. There, we've outlined everything from the security of our product to our organizational security.

Learn more on our security page

Dispel’s platform addresses multiple internal and customer needs for Swisscom. Through a secure, versatile platform, Dispel has demonstrated the ability to protect remote IT networks, cloud networks, and segmented industrial systems.

SwisscomField Test Report

Frameworks and Compliance

NERC-CIPNIST CSF 1.1NIST 800-82/53

Features

  • True Segmentation

  • AD Integration

  • Full Redundancy

  • Multi-Factor Authentication

  • Dynamic Positioning

  • Logging and Monitoring

  • Automatic Patching

  • Moving Target Defense

Plus a lot more...

Pricing

Let’s talk price.

Big or small, we scale to fit your organization.

We don’t believe in per-user or per-endpoint pricing. Our pricing is based on infrastructure and concurrent sessions, so you only pay for what you deploy. See some of the features we offer below.

Ready to get started?

Get pricing
  • Multi-Factor Authentication

    Use the Temporary One Time Passwords or hardware tokens you already love.

  • Full Redundancy

    Geographic, vendor-agnostic, hot-swappable redundancy ensures your systems are always available.

  • No External Internet

    Grant remote connectivity through whitelisted subnets you can edit in real time.

  • Same-Day Implementation

    Make your team's life better in a matter of hours. Implementation and training takes less than a day.

  • End-to-End Encryption

    Two layers of AES-256 encryption with independent 4096-bit RSA keys protect every connection.

  • Active Directory Integration

    We integrate with your AD, so your users don't need to learn a new set of credentials.

  • No Endpoint Installations

    Patching and updating every endpoint every year? We don’t believe in that.

  • Automatic Patching

    We update our infrastructure every single day, so you're always on the latest machines.

  • Logging and Monitoring

    All of our machines speak syslog, and we provide screen recording for virtual desktops.

While the inherent security of their technologies interested my team, it was Dispel‘s ability to deliver the systems I needed ahead of schedule and tailored to NantHealth‘s particular requirements that won me over.

Deb CafarellaSenior Director of IT at NantHealth

Working With Us

It’s our job to make your life easy.

We believe a product is only as good as its process.

Assess

  • You have the right to fall in love with a product first. See a demo, do a lab test, run a field test. Make a purchase decision only when you're sure it does what you want.

  • Fun Fact

    We have the patience of a glacier, but we reward efficient procurement processes with discounts. Typically, this takes four to six weeks.

Deploy

  • Our teams scope the deployment together. Then, we fly a person out for a day to implement your remote access and provide training for your employees.

  • Fun Fact

    Your network engineers probably love checklists. Fortunately, we do too: our remote access deployments take less than 40 minutes of on-the-ground time.

Manage

  • We've built a web console for all your access administrative needs. Manage your ICS remote access independently, or call us every day. It is entirely up to you.

  • Fun Fact

    One of our clients manages over 1,000 access channels simultaneously with a single person.

Maintain

  • Support

    We handle keeping infrastructure up-to-date, but whether you want our latest pen-test report, need a customization, or just want a sticker of our owl for your child's bedroom wall, we're here to help you.

  • Fun Fact

    We're committed to same-day responses. Our support team is available for on-premises or remote work as needed.


Dispel Case Study

Connecticut Water.

Dispel is protecting access to water systems serving more than 300,000 people.

Watch how Connecticut Water uses Dispel to protect their industrial control systems and allow their operators to securely connect to their SCADA equipment in seconds – by Will Perez at ARC Forum.

How they use us

  • 40+ facilities

    Across 3 independent sites. We cover a lot of ground and equipment.

  • 24/7 access

    For over 150 operators on their SCADA network.

  • Corporate ≠ ICS

    We protect both for them, but the networks are completely separate.


Why they chose us

  • Their operators loved us

    Because they were happy with the connection speed and how easy it is.

  • They saved $980k per year

    Even with the deployment of full geographic redundancy.

  • It was just so simple

    For IT to administer, instead of 300 jumphosts across both networks.