One Console. Every OT Endpoint. Windows 2000 Through Windows 11.

Unified management for Stellar Discover sensors and Stellar Protect agents across your entire endpoint estate.

TXOne StellarOne is the single-pane management console for every Stellar deployment. Inventory Discover sensors, push policies to Protect agents, coordinate one-click upgrades from sensor to agent, and forward telemetry to Splunk, Microsoft Sentinel, and QRadar. One platform covering 25+ years of Windows and Linux.

Schedule a StellarOne Demo Download Datasheet

Managing OT endpoints should not mean maintaining two tools, one for legacy and one for modern. StellarOne unifies both.

Your OT estate spans Windows 2000 SP4 through Windows 11, plus Linux. Most management consoles force you to pick which generation you protect. StellarOne does not. One console manages Stellar Discover visibility sensors, Stellar Protect ICS and Kiosk agents, policy deployment, baseline approvals, and one-click remote upgrades from Discover to Protect. StellarOne forwards telemetry to Splunk, Microsoft Sentinel, and QRadar through native connectors, so your SOC continues to operate in the tooling they already know. IEC 62443, NIST CSF, and NERC CIP evidence flows out of everyday policy management, not a separate audit preparation cycle.

One Console for the OT Endpoint Reality You Actually Run

Your OT endpoints span every Windows generation from 2000 SP4 through 11, plus Linux. Some are air-gapped. Some run alongside IT EDR. Some will never accept a kernel-level agent, and some need full prevention right now. StellarOne does not force you to choose. One console manages Stellar Discover sensors for visibility-first deployments and Stellar Protect ICS and Kiosk agents for full prevention. When a Discover assessment shows which endpoints need protection, StellarOne handles the remote upgrade with one click. Your SIEM continues to operate in Splunk, Sentinel, or QRadar. Your corporate and site teams see exactly what their role lets them see. Management that matches how your estate actually exists.

One Console, Discover and Protect

Manage visibility sensors and prevention agents from the same platform.

Windows 2000 Through Windows 11

25+ years of Windows coverage plus major Linux distributions in one management surface.

SIEM-Native Telemetry

Splunk, Microsoft Sentinel, and QRadar integrations with bi-directional enrichment.

Air-Gap Operation

Full management and pattern distribution in fully isolated environments via USB.

+

Years of Windows coverage

Console for Discover and Protect

Native SIEM integrations

Mandatory reboots required

Challenges

OT Security Challenges

Critical challenges that StellarOne is purpose-built to solve

01 / 04

Parallel tooling doubles administrative overhead

Two Tools for One Estate

Most management consoles pick a side: legacy or modern. You end up maintaining one tool for Windows XP HMIs and another for Windows 11 workstations. Every policy change happens twice.

Parallel tooling doubles administrative overhead

Two Tools for One Estate

Most management consoles pick a side: legacy or modern. You end up maintaining one tool for Windows XP HMIs and another for Windows 11 workstations. Every policy change happens twice.

Key Features

Discover how StellarOne protects your OT environment

01 / 06

Single Console for Every OT Endpoint

Manage Discover sensors, ICS agents, and Kiosk agents from one unified console. Coverage spans Windows 2000 SP4 through Windows 11 and Server 2025, plus Linux for ICS agents. No separate tools for legacy versus modern, no gaps in coverage, no fragmentation across OS generations.

Key Capabilities

Manage Discover, ICS, and Kiosk agents together

Windows 2000 SP4 through Server 2025 on one pane

Linux malware scanning unified with Windows management

Eliminate separate tools for legacy and modern endpoints

O

One-Click Discover to Protect Upgrade

Stellar Discover sensors upgrade to Stellar Protect agents remotely via StellarOne with a single click. No reinstallation, no site visit, no production disruption. Deployed sensor count directly informs per-seat ICS license sizing.

Key Capabilities

One-click activation of prevention on existing Discover sensors

No reinstallation, no reboot, no site visit

Sensor telemetry informs accurate ICS license sizing

Staged maturity journey from visibility to prevention

A

Automated Per-Device Baseline Generation

StellarOne orchestrates automated baseline fingerprinting for every ICS-protected endpoint. Each device receives a unique operational baseline capturing its authorized state. Deviations trigger immediate prevention. No manual allowlist building, no weeks of configuration.

Key Capabilities

Automated baseline capture per endpoint

Zero manual allowlist configuration required

Baseline-locked prevention blocks behavior outside approved state

Supports IEC 62443 and NIST CSF protect function

Approval Workflows and Role-Based Access

Multi-site environments require controlled change. StellarOne enforces role-based access control and approval workflows for policy deployment, agent upgrades, and configuration changes. Engineering and security teams work from shared policy without stepping on each other.

Key Capabilities

Role-based access control for security and operations roles

Approval workflows for policy and upgrade changes

Audit trail for every configuration change

Separation of duties between IT and OT staff

A

Air-Gap and Offline Support

StellarOne supports air-gapped deployments for ICS and Kiosk agents with USB pattern updates. No mandatory internet connection, no cloud dependency. Agents operate with full prevention capabilities in isolated networks where connected management cannot reach.

Key Capabilities

USB-based pattern distribution for isolated sites

No mandatory cloud connectivity for ICS or Kiosk agents

Full prevention capability in air-gapped networks

Management continuity during network outages

SIEM Integration and API

StellarOne forwards endpoint events to Splunk, Microsoft Sentinel, and other SIEM platforms via bi-directional integration. REST API supports automation, ticketing, and SenninOne orchestration. Endpoint telemetry flows into enterprise security operations without manual export.

Key Capabilities

Bi-directional Splunk and Microsoft Sentinel integration

REST API for automation and custom workflows

Telemetry feed to SenninOne for VSAR prioritization

Syslog and CEF forwarding for broad SIEM compatibility

Single Console for Every OT Endpoint

Manage Discover sensors, ICS agents, and Kiosk agents from one unified console. Coverage spans Windows 2000 SP4 through Windows 11 and Server 2025, plus Linux for ICS agents. No separate tools for legacy versus modern, no gaps in coverage, no fragmentation across OS generations.

Key Capabilities

Manage Discover, ICS, and Kiosk agents together

Windows 2000 SP4 through Server 2025 on one pane

Linux malware scanning unified with Windows management

Eliminate separate tools for legacy and modern endpoints

Use Cases

Real-World Applications

See how organizations deploy StellarOne in production environments

01 / 05

Stage the Endpoint Security Journey from Visibility to Prevention

Start with Stellar Discover sensors to establish asset inventory and risk baseline. Use the assessment report to identify endpoints with active malware or critical vulnerabilities. Upgrade prioritized endpoints to Stellar ICS via one-click remote activation, all from one StellarOne console.

Stage the Endpoint Security Journey from Visibility to Prevention

Start with Stellar Discover sensors to establish asset inventory and risk baseline. Use the assessment report to identify endpoints with active malware or critical vulnerabilities. Upgrade prioritized endpoints to Stellar ICS via one-click remote activation, all from one StellarOne console.

Deployment Options

Choose the right deployment model for StellarOne

On-Premises Virtual Appliance

Deploy StellarOne as a virtual appliance on your existing hypervisor. Full management capability without cloud dependency. Supports air-gapped environments with USB pattern updates for ICS and Kiosk agents.

Cloud and Hybrid Deployment

Deploy StellarOne on AWS, Azure, or a hybrid architecture for multi-site organizations. Central management with regional data residency options. Not available for air-gapped environments.

Technology

Technologies powering StellarOne

Unified Multi-Edition Agent Management

Discover, ICS, and Kiosk on One Platform

StellarOne is the single management plane for all Stellar agent editions. Security teams deploy Discover for visibility, upgrade to ICS for prevention where the endpoint supports it, and fall back to Kiosk only for the most constrained endpoints. One console, one policy model, one upgrade path.

Deploy and manage Discover, ICS, and Kiosk from one console
One-click remote upgrade from Discover sensor to Protect agent
Shared policy model across agent editions
Unified reporting for mixed-edition fleets

Only StellarOne manages Discover visibility, ICS prevention, and Kiosk lite agents on a single platform.

Deploy StellarOne in 5 Steps

A streamlined implementation process designed for OT environments with zero disruption to operations.

01

Week 1: Deploy StellarOne virtual appliance and define site and policy groups

02

Week 2: Roll out Stellar Discover sensors across priority OT endpoints for visibility and assessment

03

Week 3-4: Review assessment report; identify endpoints requiring ICS prevention and endpoints requiring Kiosk fallback

04

Month 2: Remote one-click upgrade of prioritized Discover sensors to Stellar ICS agents via StellarOne

05

Ongoing: Integrate with SenninOne for VSAR prioritization and with Splunk or Microsoft Sentinel for SIEM correlation

Operational & Protected

Technical Specifications

Stellar Discover (Sensor)Windows only, StellarOne-managed, no air-gap

Stellar ICS (Protect Agent)Windows 2000 SP4 through Server 2025 and Windows 11, plus Linux

Stellar Kiosk (Legacy Mode Agent)Windows 2000 SP4 through Windows 11, no Linux

Mixed-edition fleet managementSupported on a single StellarOne instance

Seamless Integration with StellarOne

Designed to integrate into existing OT infrastructure without disrupting operations.

Unified console for Stellar Discover sensors and Stellar Protect agents

Bi-directional SIEM integration with Splunk, Microsoft Sentinel, and QRadar

Role-based access control aligned to corporate and site organizational structure

One-click remote upgrade from Discover to Protect via StellarOne

Sennin handoff for cross-product unified governance

Air-gap operation with USB-based pattern distribution

Customer Success

Chris Thompson
Director of Brewery OT Security at Carlsberg Group, Carlsberg Group

Giampaolo Tacchini
Group CISO & Quality Manager, Edison, Edison Group

Related Resources

Explore resources related to StellarOne

data sheet

Stellar datasheet

Stellar is a comprehensive OT/CPS security solution providing continuous detection and response aligned to the specific requirements of the OT domain. With successful deployments in a wide range of industries, including electric power, oil and gas, manufacturing, pharmaceutical, semiconductor, and retail, Stellar is proven to boost operations’ reliability, efficiency, and stability throughout the entire asset… Read more

Download

webinar

[On-Demand Webinar] Today’s Modern is Tomorrow’s Legacy: 3 Cost-Effective Approaches to Secure OT Assets

Is modernizing your legacy ICS and OT devices a reliable protection strategy? Today’s modern is tomorrow’s legacy, just as we’re seeing with Microsoft ending support for Windows 10 later this year. Learn how to maintain operational resiliency, adhere to security compliance and avoid equipment replacement costs with TXOne solutions designed to support both legacy and… Read more

Annual OT/ICS Cybersecurity Report 2024

As the line between IT and OT continues to blur, new efficiencies are unlocked in tandem with new risks—namely, supply chain vulnerabilities, aging infrastructure, patching difficulties, and gaps in incident response. These challenges are the main focus of our Annual OT/ICS Cybersecurity Report, which is grounded in a large-scale survey conducted jointly by TXOne Networks… Read more

See All Resources

Browse all resources related to stellarone

View All

Related Products

Stellar Protect

Stellar Protect delivers prevention-first security across Windows 2000 through Windows 11. ICS Edition for the full prevention suite; Kiosk Edition for the most constrained legacy endpoints.

Stellar Discover

User-space visibility sensor. One-minute install. No drivers. No kernel access. No reboot.

SenninOne

Unified governance for Edge, Stellar, and Element with VSAR risk scoring and approval workflows.

Ready to Manage Every OT Endpoint From One Console?

See StellarOne unify visibility sensors and prevention agents across 25+ years of Windows and Linux with air-gap capability and SIEM integration.

Schedule a StellarOne Demo Download Datasheet