AppGate has expanded its zero-trust offering for operational technology with Session Governance, a set of controls aimed at remote access to critical infrastructure. The capabilities build on the ZTNA for OT product introduced in March 2026, which governed who could connect. The update adds session recording, live monitoring, supervisor-initiated termination, and credential vaulting and injection.
According to the vendor, the goal is to reduce risk from third-party remote connections used by contractors, vendors, and OEMs, while also giving operators evidence for compliance audits. AppGate argues that fully automated remediation is dangerous in OT settings because one incorrect action can interrupt a physical process. Instead, supervisors can monitor sessions in real time and end them when activity moves outside the approved scope.
The release also lets organizations feed asset inventory data from existing OT platforms into access policy, so entitlements follow asset context rather than static address lists. AppGate says the product works alongside existing monitoring and engineering tools and runs on-premises, with access and governance not dependent on a cloud round trip.
Because this article is based on a single vendor announcement, there is no independent reporting to compare or contrast. The claimed compliance support for IEC 62443, NERC CIP-005, NIST SP 800-82, and CMMC should be verified against the relevant standards. The source positions these changes as a way to keep human judgment central while strengthening security for OT environments.