TXOne Networks
Hero background

One Console. Every OT Endpoint. Windows 2000 Through Windows 11.

Unified management for Stellar Discover and Stellar Protect agents across your entire endpoint estate.

TXOne StellarOne is the single-pane management console for every Stellar deployment. Inventory Discover sensors, push policies to Protect agents, coordinate one-click upgrades from sensor to agent, and forward events to Splunk, Microsoft Sentinel, and QRadar. One platform covering 25+ years of Windows and Linux.

Managing OT endpoints should not mean maintaining two tools, one for legacy and one for modern. StellarOne unifies both.

Your OT estate spans Windows 2000 SP4 through Windows 11, plus Linux. Most management consoles force you to pick which generation you protect. StellarOne does not. One console manages Stellar Discover visibility sensors, Stellar Protect agents, policy deployment, baseline configuration, and one-click remote upgrades from Discover to Protect. StellarOne forwards events to Splunk, Microsoft Sentinel, and QRadar through native connectors, so your SOC continues to operate in the tooling they already know. IEC 62443, NIST CSF, and NERC CIP evidence flows out of everyday policy management, not a separate audit preparation cycle.

One Console for the OT Endpoint Reality You Actually Run

Your OT endpoints span every Windows generation from 2000 SP4 through 11, plus Linux. Some are air-gapped. Some run alongside IT EDR. Some will never accept a kernel-level agent, and some need full prevention right now. StellarOne does not force you to choose. One console manages Stellar Discover sensors for visibility-first deployments and Stellar Protect agents for full prevention. When a Discover assessment shows which endpoints need protection, StellarOne handles the remote upgrade with one click. Your SIEM continues to operate in Splunk, Sentinel, or QRadar. Your corporate and site teams see exactly what their role lets them see. Management that matches how your estate actually exists.

One Console, Discover and Protect

Manage visibility sensors and prevention agents from the same platform.

Windows 2000 Through Windows 11

25+ years of Windows coverage plus major Linux distributions in one management surface.

SIEM-Native Telemetry

Splunk, Microsoft Sentinel, and QRadar integrations with bi-directional enrichment.

Air-Gap Operation

Full management and pattern distribution in fully isolated environments via USB.

+
Years of Windows coverage
Console for Discover and Protect
Native SIEM integrations
Challenges

OT Security Challenges

Critical challenges that StellarOne is purpose-built to solve

Parallel tooling doubles administrative overhead

Two Tools for One Estate

Most management consoles pick a side: legacy or modern. You end up maintaining one tool for Windows XP HMIs and another for Windows 11 workstations. Every policy change happens twice.

Key Features

Key Features

Discover how StellarOne protects your OT environment

Single Console for Every OT Endpoint

Manage ICS and Kiosk agents from one unified console. Coverage spans Windows 2000 SP4 through Windows 11 and Server 2025, plus Linux for ICS agents. No separate tools for legacy versus modern, no gaps in coverage, no fragmentation across OS generations.

Key Capabilities

Manage Protect agents and Discover sensors together
Windows 2000 SP4 through Server 2025 on one pane
Linux malware prevention unified with Windows management
Eliminate separate tools for legacy and modern endpoints
Use Cases

Real-World Applications

See how organizations deploy StellarOne in production environments

Stage the Endpoint Security Journey from Visibility to Prevention

Start with Stellar Discover sensors to establish asset inventory and risk baseline. Use the assessment report to identify endpoints with active malware or critical vulnerabilities. Upgrade prioritized endpoints to Stellar ICS via one-click remote activation, all from one StellarOne console.

Deployment Options

Choose the right deployment model for StellarOne

On-Premises Virtual Appliance

Deploy StellarOne as a virtual appliance on your existing hypervisor. Full management capability without cloud dependency. Supports air-gapped environments with USB pattern updates for ICS and Kiosk agents.

Cloud and Hybrid Deployment

Deploy StellarOne on AWS, Azure, or a hybrid architecture for multi-site organizations. Central management with regional data residency options. Not available for air-gapped environments.

Technology

Technologies powering StellarOne

Unified Multi-Edition Agent Management

Discover, ICS, and Kiosk on One Platform

StellarOne is the single management plane for all Stellar agent editions. Security teams deploy Discover for visibility, upgrade to ICS for prevention where the endpoint supports it, and fall back to Kiosk only for the most constrained endpoints. One console, one policy model, one upgrade path.

  • Deploy and manage Discover, ICS, and Kiosk from one console
  • One-click remote upgrade from Discover sensor to Protect agent
  • Shared policy model across agent editions
  • Unified reporting for mixed-edition fleets

Only StellarOne manages Discover visibility, ICS prevention, and Kiosk lite agents on a single platform.

Deploy StellarOne in 5 Steps

A streamlined implementation process designed for OT environments with zero disruption to operations.

01

Week 1: Deploy StellarOne virtual appliance and define site and policy groups

02

Week 2: Roll out Stellar Discover agents across priority OT endpoints for visibility and assessment

03

Week 3-4: Review assessment report; identify endpoints requiring protection

04

Month 2: Remote one-click upgrade of prioritized Stellar Discover agents to Stellar Protect

05

Ongoing: Integrate with SenninOne for VSAR prioritization and with Splunk or Microsoft Sentinel for SIEM correlation

Operational & Protected

Technical Specifications

Stellar Discover AgentWindows only, StellarOne-managed, requires continuous connection to StellarOne
Stellar Protect Agent for WindowsWindows 2000 SP4 through Server 2025 and Windows 11
Stellar Protect Agent for LinuxUbuntu, CentOS, RHEL, Rocky, Debian, Oracle, openSUSE, AlmaLinux Miracle
Mixed-edition fleet managementSupported on a single StellarOne instance

Seamless Integration with StellarOne

Designed to integrate into existing OT infrastructure without disrupting operations.

Unified console for ICS and Kiosk agents
Bi-directional SIEM integration with Splunk, Microsoft Sentinel, and QRadar
Role-based access control aligned to corporate and site organizational structure
One-click remote upgrade from Discover to Protect via StellarOne
Sennin handoff for cross-product unified governance
Air-gap operation with USB-based pattern distribution

Customer Success

Ansaldo

Within this context, TXOne Networks emerged as the ideal technology partner, capable of responding precisely to Ansaldo Energia’s requirements.

Diego Lusso
Cyber Security OT Manager, Ansaldo
Carlsberg Group

Thanks to OT security solution Stellar, TXOne Networks helps us mitigate risks that we couldn't address yesterday without making significant financial investments.

Chris Thompson
Director of Brewery OT Security, Carlsberg Group

Ready to Manage Every OT Endpoint From One Console?

See StellarOne unify visibility sensors and prevention agents across 25+ years of Windows and Linux with air-gap capability and SIEM integration.