Xona Systems
Xona Systems provides a browser-based Zero Trust secure remote access platform for OT and industrial control systems, using proprietary protocol isolation to serve energy, oil and gas, manufacturing, and maritime critical infrastructure operators.
- Company typePrivate
- Founded2015
- HeadquartersHanover, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Xona Systems does
Xona Systems is a privately held cybersecurity company founded in 2015 by Bill Moore and headquartered in Annapolis, Maryland, that provides a browser-based Zero Trust secure remote access platform purpose-built for operational technology (OT) and industrial control system (ICS) environments in critical infrastructure sectors. The core offering, the Xona Platform, combines the Critical System Gateway (CSG) hardware appliance — which uses proprietary protocol isolation technology to convert native remote protocols (RDP, VNC, SSH) into encrypted browser-displayed sessions over port 443, eliminating the VPN attack surface — with the Xona Centralizer for unified governance across distributed deployments. Technical components include identity-based least-privilege access controls with time-bound permissions, the Active Defense module (launched March 2026) for automated real-time threat response during live sessions, and Session Hold and RDP Auto-Reconnect capabilities introduced in Platform v5.5 (February 2026).
The platform serves energy, oil and gas, manufacturing, maritime, transportation, water utilities, pharma/biotech, and government operators, with explicit alignment to NERC CIP, IEC 62443, TSA SD2/SD2E, the EU NIS2 Directive, and NIST 800-207. Xona monetizes through subscription-based software licensing on annual terms, hardware appliance sales, professional services (Standard and Premium tiers with severity-based SLAs and advanced hardware replacement), and managed or co-managed services delivered via MSSP partners. Go-to-market combines direct enterprise field sales, strategic OEM partnerships with GE (Vernova) and Baker Hughes for embedded distribution, technology integrations with OT detection platforms (Forescout, Nozomi Networks), and a growing channel partner ecosystem including MSSP spotit for European market coverage.
Named enterprise customers include GE Vernova, RWE, Egyptian LNG, AltaGas, Baker Hughes, and a Fortune 500 manufacturer with 500+ sites, with deployments spanning more than 40 countries. The company has raised approximately $27.2 million in total disclosed funding, including a $7.2 million Series A in May 2022 led by DataTribe Opportunities Fund and an $18 million round in June 2024 led by Energy Impact Partners. Xona has been recognized as Overall Leader in KuppingerCole's 2025 Leadership Compass for Secure Remote Access in OT/ICS, won the 2026 Global InfoSec Award at the RSA Conference, and was named in Omdia's "On the Radar" report.
Xona Systems firmographics
Firmographics- Name
- Xona Systems
- Legal name
- XONA
- Website
- https://xonasystems.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Xona Systems provides a browser-based Zero Trust secure remote access platform for OT and industrial control systems, using proprietary protocol isolation to serve energy, oil and gas, manufacturing, and maritime critical infrastructure operators.
- Ownership category
- akta.pro rank
Xona Systems industry classification
Industry- Product category
- OT/ICS Secure Remote Access
- NAICS
- Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)
- SIC
- Computer Communications Equipment (3576)
- akta.pro primary industry
- Remote Access & Privileged Access for OT (ZTA/PAM for Vendors) (HDADAJAG)
- akta.pro secondary industries
- Access Management & Policy Enforcement (Authorization, ZTNA integration) (HDAEAJAG), Software-Defined Perimeter (SDP) / Zero Trust Network Access (ZTNA) (HDADABAC), Secure Remote Access / ZTNA Gateways (Appliance/Virtual Appliance) (HDAFAFAI)
Keywords
Where Xona Systems is headquartered
LocationHeadquarters
- HQ city
- Hanover
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Xona Systems business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure, Supply Chain
Revenue model
- Software Licensing (Subscription): Time-limited software licenses granted during Subscription Term with fees paid annually or per order period. Software is licensed, not sold. Renewal terms require 60-day notice for non-renewal. Includes software updates and upgrades made generally commercially available.
- Hardware Sales: On-premises hardware appliances provided by Xona or its suppliers authorized for use with the software. Hardware includes all updates, upgrades, modifications, improvements and derivatives. Title passes to customer upon delivery to FOB point.
- Professional Services: Technical support services including Standard Services (business hours) and Premium Services (24/7 with advanced hardware replacement). Training services including initial 2-hour session at no cost with additional training available for fee. Installation services available for purchase.
- Managed/Co-Managed Services: spotit partnership provides Xona Platform as managed or co-managed solution in Europe, expanding revenue through MSSP channel without altering existing network architecture.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Standard Services - Business hours technical support with telephone consultation |
| Subscription | Annual | Premium Services - 24/7/365 support with advanced hardware replacement |
| One time/ perpetual license | Pay-as-you-go | Hardware Warranty Only - 90-day limited warranty |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels6 records
Xona Systems product offering
Product offeringCore offering
Xona Systems provides a browser-based Zero Trust secure remote access platform purpose-built for operational technology (OT) and industrial control system (ICS) environments. The platform eliminates VPNs and endpoint installs by using proprietary protocol isolation that converts RDP, VNC, and SSH into encrypted browser displays, with identity-based access, time-bound permissions, and full session recording. It is delivered through the Xona Critical System Gateway (CSG) appliance and the Xona Centralizer governance layer, with an Active Defense capability for real-time threat response during live sessions.
Product overview
Xona Systems offers a unified Zero Trust platform purpose-built for secure remote access to operational technology (OT) and industrial control systems (ICS) in critical infrastructure environments. The core product, the Xona Platform, is delivered as a combination of the Critical System Gateway (CSG) hardware appliance (providing protocol isolation and browser-based access) and the Xona Centralizer (providing centralized governance across distributed deployments). The platform eliminates VPNs and endpoint installs, instead using identity-based access, time-bound permissions, and full session recording to enforce least-privilege access to HMIs, PLCs, SCADA, and DCS systems. Session resilience capabilities include Session Hold and RDP Auto-Reconnect (Platform v5.5), while the Active Defense module (March 2026) adds real-time automated threat response during live sessions.
Differentiator
Problem solved
Functional benefit
Products and services
- Xona Platform
- Xona Critical System Gateway (CSG)
- Xona Centralizer
- Active Defense
Quantifiable outcome
- 70% faster vendor onboarding
- +4 more outcomes
Companies that use Xona Systems
Customer profileNamed customers12 records
Segments9 records
Ideal customer profiles3 records
Xona Systems technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
Feature6 records
Xona Systems partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core.
- spotitcorePartnership with spotit, Belgium's leading independent MSSP, to deliver managed and co-managed secure access for OT and ICS across Europe. Spotit integrates Xona Platform into its Zero Trust and OT/IoT security portfolio targeting energy, manufacturing, pharmaceuticals, and utilities sectors. Enables NIS2 Directive compliance without altering existing network architecture.
- GE (Vernova)coreStrategic OEM partnership for embedding Xona secure access platform within GE's industrial technology offerings for power generation and energy sector customers.
- Baker HughescoreStrategic OEM partnership for deploying Xona secure access within Baker Hughes oil and gas technology solutions.
Scale indicators7 records
Recent moves6 records
Expansion highlights7 records
Xona Systems competitors and assessment
Company assessmentDirect peers
- Nozomi Networks: OT and IoT security platform providing asset visibility and threat detection; Xona integrates with Nozomi for centralized governance, indicating direct overlap in customer base and complementary offerings.
- Forescout: OT/IoT security and network access control vendor; Active Defense integrates with Forescout's detection platform, placing both in the same critical infrastructure security stack conversations.
- Cyolo: Direct competitor offering zero-trust secure remote access purpose-built for OT/ICS environments with identity-based controls and protocol isolation, serving similar critical infrastructure buyers.
- Claroty: Direct OT/ICS cybersecurity competitor with a Secure Remote Access (SRA) product targeting critical infrastructure asset owners, comparable in vertical focus and use cases to Xona.
- Dispel: Direct peer providing secure remote access solutions for OT environments, focusing on multi-point connectivity and ephemeral access controls similar to Xona's positioning.
- Dragos: OT/ICS cybersecurity leader offering asset visibility, threat detection, and secure remote access for industrial environments, directly competing for the same critical infrastructure security budgets.
Broad incumbents
- CyberArk: Privileged access management (PAM) leader expanding into OT secure access; competes for the OT vendor access wallet at the broader identity security layer rather than as a pure-play OT access vendor.
- BeyondTrust: PAM and secure remote access vendor with OT/ICS capabilities, offering competing privileged session management for industrial environments as part of a broader identity security portfolio.
- Palo Alto Networks: SASE/ZTNA platform incumbent with Prisma Access and OT Security offerings that compete with Xona in enterprise secure access deals; broader portfolio and deeper enterprise reach create competitive pressure.
- Microsoft: Defender for IoT and Entra ID capabilities position Microsoft as a default enterprise identity and IoT/OT security incumbent; its bundling and existing enterprise footprint create significant competitive risk for standalone OT access vendors.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Xona Systems social profiles
Digital presenceXona Systems compliance and trust
Trust signalCompliance5 records
Xona Systems financial estimates
Financial estimateRevenue estimate
Valuation estimate
Xona Systems leadership team
Management profileNumber of profiles
Profiles6 records
Xona Systems funding detail
Funding detailFunding overview
Funding rounds4 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Xona Systems M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Xona Systems
What does Xona Systems do?
Xona Systems provides a browser-based Zero Trust secure remote access platform purpose-built for operational technology (OT) and industrial control system (ICS) environments. The platform eliminates VPNs and endpoint installs by using proprietary protocol isolation that converts RDP, VNC, and SSH into encrypted browser displays, with identity-based access, time-bound permissions, and full session recording. It is delivered through the Xona Critical System Gateway (CSG) appliance and the Xona Centralizer governance layer, with an Active Defense capability for real-time threat response during live sessions.
Is Xona Systems a public or private company?
Xona Systems is a private company. It is classified as venture growth investor backed and is currently operating.
When was Xona Systems founded?
Xona Systems was founded in 2015. It employs 11 to 50 people.
Where is Xona Systems based?
Xona Systems is headquartered in Hanover, United States, in the North America region.
How does Xona Systems make money?
Four revenue lines are on record. Software Licensing (Subscription) is the primary driver. The others are hardware Sales, professional Services and managed/Co-Managed Services.
Who are Xona Systems's main competitors?
Direct peers on record are Nozomi Networks, Forescout, Cyolo, Claroty, Dispel and Dragos. Broad incumbents are CyberArk, BeyondTrust, Palo Alto Networks and Microsoft.
Does Xona Systems have an API?
No public API is recorded for Xona Systems.
What industry is Xona Systems in?
Xona Systems's product category is OT/ICS Secure Remote Access. Its primary akta.pro industry code is HDADAJAG, Remote Access & Privileged Access for OT (ZTA/PAM for Vendors), with a secondary code of HDAEAJAG, Access Management & Policy Enforcement (Authorization, ZTNA integration). Its NAICS code is 54151 and its SIC code is 3576.