IXT, a Norway-based mobile virtual network operator, is moving to integrate cybersecurity more deeply into cellular connectivity, announcing a partnership with Zscaler to embed Zero Trust Network Access directly into its IoT platform.
The initiative reflects a broader shift away from virtual private networks, or VPNs, which have long underpinned remote access but are increasingly seen as ill-suited to large-scale device environments. Instead, organisations are adopting Zero Trust models that verify every connection and limit access by default.
By embedding Zscaler’s technology at the SIM level, IXT is targeting a persistent weakness in IoT deployments: securing large fleets of devices that cannot run conventional security software and are often deployed in remote or industrial settings.
“VPNs were designed to connect users on laptops to corporate networks. They were never built for thousands of headless devices in energy grids, water treatment plants and factory floors,” said Henning Solberg, Chief Technology Officer and Co-Founder of IXT. “With this integration, we bring the same Zero Trust architecture that Zscaler delivers to Fortune 500 IT environments directly to OT and IoT devices over cellular.”
Under the arrangement, device traffic is routed through Zscaler’s Cloud-based Zero Trust Exchange, where it is inspected and policy-controlled before reaching its destination. The model removes the need for inbound network exposure and avoids the broad access permissions typically associated with VPNs.
The timing aligns with tightening regulation in Europe. The NIS2 Directive, now being transposed into national law, imposes stricter requirements on operators of critical infrastructure to secure networks, including connected devices. It also introduces direct accountability for senior management.
“For organisations facing NIS2 compliance obligations, this integration is designed to support key requirements with a reduced attack surface, no VPN dependencies, full traffic inspection, and audit-ready controls, all from a single SIM,” Solberg said.
The challenge is particularly acute in sectors such as energy, utilities, manufacturing, and transport, where operational technology systems are increasingly connected via cellular networks. Third-party access remains a common vulnerability, with contractors often granted broad network entry through VPNs.
IXT’s platform instead provides browser-based access to specific systems, with time-limited sessions and full recording, removing the need to distribute VPN clients and narrowing the scope of access.
“In most IoT environments, devices are connected, but not really controlled,” said Marius Holmsen, Chief Technology Officer at Shift Security. “This integration allows organisations to define exactly what each device is allowed to communicate with, and enforce that consistently across the network with full visibility.”
The approach also points to a convergence between telecommunications and cybersecurity. By embedding security controls into the network layer, connectivity providers are positioning themselves as intermediaries for both data transport and risk management.
Such models are typically delivered through partnerships. IXT worked with Shift Security to implement the integration, highlighting the increasingly collaborative nature of enterprise IoT deployments.
While Zero Trust principles are well established in corporate IT, adoption in operational technology has lagged, constrained by legacy systems and fragmented connectivity. Embedding security at the SIM level may offer a more scalable approach.
“By integrating Zscaler’s Zero Trust service into the IXT SecureNet platform at the SIM level, IXT gives customers a simple way to apply Zero Trust controls to cellular-connected OT and IoT devices — without VPN complexity or exposed inbound access,” said Nathan Howe, Senior Vice-President of Innovation at Zscaler.
The development underscores a broader industry shift: as the number of connected devices grows, securing the networks they rely on may prove more effective than attempting to manage each device individually.
