What actually expanded inside SecureOT
Rockwell Automation added two concrete pieces to its existing SecureOT suite. Firewall Managed Services with Fortinet puts Rockwell in charge of monitoring, alarm handling, rule changes, patching, and firmware updates on customers' Fortinet FortiGate firewalls, rather than leaving that operational burden on an already stretched plant IT team. Infrastructure Managed Services, the second piece, is a broader offering covering 24/7 support, secure monitoring, and hardware lifecycle management for industrial network and compute environments, and it now explicitly extends to infrastructure customers already own rather than only equipment Rockwell originally sold them. Both pieces are sold as add-ons to the existing SecureOT subscription rather than as a separate standalone product line, which keeps the purchasing decision inside a relationship most manufacturers already have in place.
Aaron White, Rockwell's global capability manager for infrastructure managed services, put the rationale plainly: manufacturers need cybersecurity solutions that fit their operations, not the other way around. That framing is a notable shift in posture from a company whose business model has historically depended on customers standardizing around its own hardware and software stack, and it reflects how much leverage manufacturers now hold in demanding vendor-agnostic security support.
Why Fortinet specifically, and why now
Rockwell's own materials point to FortiGate's scalability across multiple sites, threat detection informed by FortiGuard Labs' OT-specific threat intelligence, and a lower total cost of ownership relative to several alternatives already deployed across manufacturing environments. Fortinet firewalls are common enough on factory floors that building first-class managed support around them, rather than requiring a swap to Rockwell's own preferred hardware, meaningfully widens the addressable base of manufacturers who can adopt SecureOT without a disruptive rip-and-replace project.
The timing also lands against a backdrop of sustained attacker interest in industrial firewalls specifically. Perimeter devices sitting between IT and OT networks have been a consistent target across this year's disclosed industrial intrusions, precisely because a single misconfigured rule or an unpatched firmware version on that one device can expose an entire production network. Outsourcing the operational discipline of patching and rule management to a managed provider addresses a failure mode that internal plant teams, who are rarely staffed for continuous firewall operations, have struggled to close consistently.
The quiet admission about mixed-vendor reality
By explicitly extending Infrastructure Managed Services to cover equipment manufacturers already own, including servers, virtualization platforms, switches, and backup systems from other vendors, Rockwell is conceding something its sales organization has resisted saying out loud for years: most real factory floors are not, and will never be, single-vendor environments. Decades of acquisitions, plant-level purchasing autonomy, and simple equipment longevity mean a typical manufacturing site runs hardware from half a dozen suppliers at minimum, regardless of which automation vendor holds the primary relationship.
That is a meaningfully different posture than the industrial automation industry has traditionally taken, where security services were often bundled tightly with a vendor's own hardware as a retention mechanism. Rockwell choosing to manage a competitor's firewalls and a customer's pre-existing infrastructure, rather than insisting on its own stack first, suggests the company sees more revenue opportunity in becoming the trusted operational layer across a messy environment than in continuing to fight a consolidation battle manufacturers have shown no appetite to finish.
What this solves operationally for plant IT teams
The single managed contract and single point of contact that Rockwell is promoting directly addresses a real operational pain point: most manufacturers currently juggle separate support relationships, escalation paths, and SLAs across their IT security vendor, their OT security vendor, and whichever automation supplier holds their primary contract. When a firewall alert fires at two in the morning, that fragmentation determines whether the right team gets paged in minutes or in hours, and industrial environments rarely have the luxury of a slow response when a production line's safety systems depend on a stable OT network.
Consolidating firewall management, infrastructure monitoring, and lifecycle support under one contract reduces the number of vendor relationships a lean plant IT team has to maintain actively, which matters more in OT security than in most enterprise IT contexts because so many manufacturing sites run with minimal dedicated security staff on site. The tradeoff, which CISOs should weigh honestly, is concentrating more operational trust in a single managed provider rather than spreading that risk across specialists for each layer.
How CISOs should evaluate this against alternatives
The right test for any OT managed service offering, Rockwell's included, is whether it genuinely reduces operational risk across a mixed environment or simply makes switching costs to a competitor higher once a manufacturer is locked into the relationship. Vendor-agnostic coverage of equipment the manufacturer already owns is a meaningfully better signal than a managed service that only extends to the vendor's own hardware, because it suggests the offering is built to reduce actual security gaps rather than to deepen account control.
Manufacturers currently evaluating OT security providers should ask any vendor making a similar pitch, Rockwell included, for specifics on response time commitments, patch cadence guarantees, and exactly what happens when a non-native piece of infrastructure fails or is breached under their management. Those operational details, not the breadth of the marketing language around unified contracts, are what will actually determine whether this kind of managed service closes the gaps that have made industrial firewalls such a persistent attacker target.
