OpenNAC Enterprise
The European platform that restores network control
OpenNAC Enterprise by Cipherbit is a European Network Access Control (NAC) platform designed to provide visibility, access control, and secure remote access from a single policy engine.
Discover all connected assets, assess the context of each access, and automatically apply the necessary security policies to protect IT, OT, IoT, and IoMT environments without replacing existing infrastructure.
The Network No Longer Has a Perimeter
Digital transformation has turned the network into an ecosystem where users, IoT devices, industrial systems, medical equipment, external providers, and remote employees coexist.
Without visibility or dynamic policies, any asset can become an entry point to critical systems.
Risk builds step by step. OpenNAC stops it before an incident occurs.
Automatically discovers all connected assets, including IT, OT, IoT, and IoMT devices.
Associates each device with its identity, criticality, and trust level.
Analyzes identity, security posture, context, and risk level before allowing access.
Automatically applies the defined policy for each user, device, or third party.
Allows, segments, limits, isolates, or blocks access based on detected risk.
Three Modules. A Single Policy Engine.
OpenNAC Enterprise combines three complementary capabilities to offer a complete network overview and apply adaptive access controls from a single platform.
Module 1
Visibility
Know everything connected to the network.
Discover and classify IT, OT, IoT, and IoMT assets using active, passive, or agent-based techniques to maintain an updated inventory and a complete view of the environment.
- Result: complete inventory, quantified exposure, and real operational governance.
- Use: passive visibility for IoMT/OT; passive, active, or agent-based for managed IT.
- Clear limit: remediation of legacy vulnerabilities depends on the client’s operational windows and decisions.
Module 2
Access Control
Only allow necessary access.
Applies Zero Trust policies based on identity, posture, and context to dynamically grant, limit, or deny access.
- Result: full, segmented, guest, privileged, or denied access based on risk.
- Use: AD, LDAP, SSO, certificate, MFA, AV posture, patches, and configuration.
- Clear limit: policies must be defined and approved with the security and operations team.
Module 3
Secure Remote Access
Native WireGuard VPN, MFA/2FA, posture validation, full-tunnel, and dissolvable agent for third parties.
- Result: secure connectivity from any environment and controlled access to authorized resources.
- Use: Windows, macOS, Linux, Android, and iOS; third parties without permanent installation.
- Clear limit: the scope of remote access depends on profiles, approved resources, and corporate policy.
The technical part, presented as a clear decision sheet.
OpenNAC Enterprise adopts a software-first approach that leverages existing infrastructure and integrates with the organization's technological ecosystem.
Allowing, segmenting, quarantining, or blocking is defined with the client to protect without compromising operational continuity.
The platform provides enforcement and traceability; policy design is governed by security and operations.
One Engine. Different Needs.
Protection of IoMT devices through passive visibility and segmentation without clinical impact.
Access control, segmentation, and protection of OT networks while preserving operational continuity.
Dynamic policies based on identity, posture, and context for users and devices.
Temporary, auditable, and least-privilege access for providers and collaborators.
Inventory and classification of medical devices using passive, agentless approaches without compromising care delivery.
Prudent policies, segmentation, and maintenance access control without intrusive scans.
Identity validation, endpoint posture, and dynamic application of VLAN, ACL, quarantine, or blocking.
Providers and partners with restricted, temporary, auditable, and least-privilege access.
Policy follows the user and the device.
Each connection attempt is evaluated with the same flow: connection, identity, posture, policy, and dynamic access.
The result can be full access, segmented access, remote VPN, quarantine, or blocking.
Managed and unmanaged assets
Identity · Posture · Context
Events, evidence, and traceability
VLAN · ACL · Quarantine
WireGuard · MFA · Full-tunnel
Example incident / access ticket.
External endpoint attempts to access OT network with incomplete posture.
April 12, 2026 · 10:42 AM CET
External provider · non-corporate device · captive portal.
OT maintenance segment · authorized resource within time window.
Identity validated, temporary incomplete posture, and access request outside profile.
Non-compliant external access; possible exposure of critical segment.
Limited access, isolated VLAN, audited session, and alert sent to SIEM/SOC.
Review authorization, validate device posture, and approve exception if applicable.
Technical controls aligned with European regulatory frameworks.
OpenNAC Enterprise converts regulatory requirements into operational controls through continuous inventory, access control, segmentation, and traceability over users, devices, and third parties.
Verifiable Trust for Procurement, Security, and Compliance.
Recommended information for procurement and privacy teams
Document in proposal or contract based on client environment.
Relationship and changes available under provider process.
Commitments to be formalized in SLA, DPA, or service agreement.
Evidence, certifications, and support for risk assessments.
More Visibility. More Control. Less Exposure.
OpenNAC Enterprise transforms network security into an operational capability that allows knowing what is happening at all times, applying dynamic access policies, and maintaining control over users, devices, and third parties from a single platform.
organizations protected with visibility, access control, and secure remote access.
Continuous inventory and policies that transform unknown devices into manageable risk.
Control without disruption for hospitals, OT, essential services, and distributed networks.
A single policy engine for IT, IoT, OT, IoMT, third parties, and remote access.
Evidence, traceability, and governance aligned with ENS, NIS2, DORA, and CPSTIC.
Hospital Clínic Barcelona: visibility and control without operational interruption.
In a highly complex clinical environment, with IoMT devices, OT systems, and thousands of connected devices, OpenNAC enabled progress towards a Zero Trust architecture with guided migration.
applied architecture
Key Results
- Greater autonomy for the hospital’s technical team.
- Migration across more than 24 centers without operational interruption.
- Dynamic segmentation by device type, service, and risk level.
- Increased agility in queries and decision-making thanks to integrated CMDB and analytics.
“OpenNAC allowed us to have complete visibility of everything connected to our network, something we had never had before.”
Paco Sánchez, Head of ICT Security – Hospital Clínic Barcelona
A European manufacturer with an operational, not just technological, vision.
While other providers sell isolated components, Cipherbit builds a preventive security platform designed for critical, regulated, and distributed organizations.
1800+ organizations protected
No dependence on proprietary hardware.
Integrates with the existing ecosystem.
Experience in healthcare, industry, public administrations, and defense.
The platform adapts to proprietary hardware.
Zero Trust, secure access, and new capabilities.
Technical assistance throughout the solution’s lifecycle.
A progressive, secure, and uninterrupted deployment
The implementation model combines initial assessment, lab testing, pilot, gradual migration, and technical support to minimize risks and accelerate adoption.
Modular and adapted to each organization
OpenNAC Enterprise allows incorporating only the necessary capabilities—Visibility, Access Control, and Secure Remote Access—facilitating progressive implementation aligned with the needs of each environment.
Regain control of your network.
Discover how OpenNAC Enterprise can help you understand everything connected to your infrastructure, apply adaptive access policies, and evolve towards a Zero Trust model prepared for the most critical environments.