TXOne Networks Overview
TXOne Networks is a specialist OT cybersecurity vendor that concentrates on enforcement rather than monitoring alone. Trend Micro and Moxa created it to protect factories, fabs, energy assets and critical infrastructure. Its portfolio combines inline industrial network protection, endpoint protection for legacy Windows systems, agentless inspection tools and a governance layer under one commercial framework, TXOne Complete. The company sells a Discover, Assess, Protect method and the promise that security will not interrupt production. Semiconductor manufacturing is its strongest franchise. TSMC has recognized the company for technical cooperation, Applied Materials is an investor and partner, and management says eight of the world's ten largest semiconductor equipment makers are customers. TXOne claims 3,600+ organizations across 50+ countries. It is smaller than the leading visibility platforms, and it differentiates through prevention, deep fab-floor knowledge and a channel-led route to market.
TXOne describes itself as an operations-first OT security partner. Its website says it has focused only on operational technology since its founding, helping industrial organizations discover assets, assess risk in context and protect operations without harming productivity or safety. Its tagline is Keep the Operation Running. TXOne publishes no statutory annual report, so this self-description comes from its corporate website and 2026 press boilerplate.
Independently characterized, TXOne is an industrial security product company with a mixed hardware and software model. Conventional IT security assumes that assets can be patched, rebooted and connected to the cloud. OT estates often cannot meet those conditions. A fab tool may run an obsolete Windows build under a vendor warranty, a pharmaceutical line may be validated against change, and a substation may be air-gapped. TXOne builds for those constraints with transparent inline appliances, agents that recognize OT software, USB and software inspection tools that leave no footprint, and support for operating systems back to Windows 2000.
Business and revenue model. TXOne sells security appliances, inspection devices, per-seat endpoint licences and management software. In Japan, partners sell the Element, Stellar, Edge and SageOne ranges on one-year licences at individually quoted prices (Hitachi Solutions Technology, May 2025). Stellar Protect is licensed per seat for 12 months. Stellar Discover is sold at a fixed price for unlimited sensors over six months, with a one-click upgrade path to Stellar Protect. This creates a land-and-expand motion from low-risk visibility to paid prevention. The split between product, subscription and service revenue is not publicly disclosed.
Value chain position. TXOne sits between industrial asset owners and the equipment makers, automation vendors and integrators that serve them. Its route to market relies on distributors, global system integrators, OEMs and managed security providers. Management's stated approach is to win the leading company in a vertical, set a reference practice, then reach smaller customers through the channel (Liberty Times, March 2025).
Customer types. Management focuses on large enterprises that have already decided to invest in OT security rather than spending heavily to educate the market (Business Next, February 2023 and May 2024).
Named customers and references include:
-
TSMC
-
GPM
-
Carlsberg Group
-
Ansaldo Energia
-
Hager Group
-
Terna
-
Sydney's metro system and several Taiwanese reservoirs (Business Next, May 2024)
End-markets. Its stated verticals are semiconductors, automotive, pharmaceuticals, food and beverage, public transportation, utilities, electronics, healthcare, mining and metals, oil and gas, and aerospace. Its website currently groups these into semiconductor, manufacturing, automotive, food and beverage, healthcare, pharmaceuticals, oil and gas, green energy, and energy and utilities.
Strategy
TXOne's strategy rests on five recurring themes.
Operations first. Every product is framed around avoiding disruption. Security is positioned as a production enabler, and TXOne claims zero unplanned downtime across 3,600+ deployments.
From visibility to enforcement. TXOne argues that the OT market has improved its ability to see risk, but not to act on it safely. In June 2026 it used the Gartner Security & Risk Management Summit to promote enforceable protection and the Discover, Assess, Protect path. The argument is competitive as well as technical, because it targets vendors built around passive monitoring.
Own the lifecycle. TXOne Complete, Edge Complete and Sennin are intended to give customers one accountable supplier from assessment to protection. SenninRecon can act as an entry point for later Edge, Stellar and Element sales.
Vertical leadership. Management chooses verticals, wins leaders and then scales through the channel. Semiconductors are the clearest example. TXOne also targets automotive, pharmaceuticals, aerospace and food.
Partner-led scale. The company invests in global system integrators, OEMs and managed security providers, and it has said that no single vendor can solve OT complexity alone.
TXOne Complete: Date: February–March 2026; Status: Active; Strategic intent: Unified partner offer
Edge Complete: Date: February 2026; Status: Active; Strategic intent: Add visibility and assessment to inline protection
Sennin family: Date: April 2026; Status: Active; Strategic intent: Close the gap between assessment and action
Stellar Discover: Date: April 2026; Status: Active; Strategic intent: Lower-risk endpoint entry point
APAC partner-led execution model: Date: April 2026; Status: Active; Strategic intent: Scale through partners and meet tighter regional regulation
Virtual Portable Inspector: Date: June–July 2026; Status: Active; Strategic intent: Move inspection from periodic to recurring
AI-driven Edge release: Date: September 2026; Status: Active; Strategic intent: Automate policy and connect AI agents through MCP
ServiceNow integrations: Date: October 2026; Status: Active; Strategic intent: Bring OT findings into enterprise workflows
Series C and US listing: Date: Discussed March 2025; Status: Unconfirmed; Strategic intent: Add international investors and access public capital
Management's public targets are limited to US$100M of annual revenue for 2025 and a US listing within two to three years of March 2025, subject to market conditions. Cost programs and sustainability commitments are not publicly disclosed.
Products & Services
Commercial framework
TXOne Complete packages network security, endpoint protection, inspection and enterprise orchestration under Discover, Assess, Protect. It is also the foundation of the company's partner program (PR Newswire, March 2026). Edge Complete, announced in February 2026, combines visibility, assessment and protection in the network line.
Network security: Edge
| Offering | Description and key capabilities | Target customer | Latest milestone | Commercial model |
|---|---|---|---|---|
| EdgeIPS family | Inline industrial IPS with Layer 2–7 inspection, 180+ industrial protocols, 1,500+ OT signatures, virtual patching and CPSDR-Networking; up to 100,000 policy rules | Plants needing segmentation and legacy protection | AI-driven release, September 2026 | Partner quoted |
| EdgeIPS 102, 103, 103F and LE 102 | Standard and entry models managed by EdgeOne | Individual assets and small segments | Current range | Partner quoted |
| EdgeIPS Pro 212F | 6 hardware segments; 1.8 Gbps+ IMIX security throughput; 200K connections | Mid-sized industrial networks | Current range | Partner quoted |
| EdgeIPS Pro 216 and 732 | Multi-segment appliances; EdgeIPS Pro 216 introduced in 2022 | Multi-line facilities | Current range | Partner quoted |
| EdgeIPS Pro 1048 and 2096 | High-port-density rack systems; the 2096 offers 48 segments, 96 modular ports and 20 Gbps IMIX | Large plants and fabs | Current range | Partner quoted |
| EdgeIPS Pro 2016F and 4016F | Rack systems for fiber infrastructure; the 4016F offers 8 segments, 16 fiber ports, 40 Gbps IMIX and 4M connections | Large facilities with fiber backbones | Current range | Partner quoted |
| vEdgeIPS Pro | First virtual appliance line; 500 Mbps to 2.5 Gbps IMIX; 1, 2 or 4 virtual segments; VMware, KVM and Hyper-V | Virtualized control systems | September 2026 | Partner quoted |
| EdgeFire 1012 and 1014 | Industrial next-generation firewall; IPSec and L2TP VPN; asset discovery; sub-500-microsecond latency; 700,000-hour MTBF | Edge segmentation and remote connectivity | Current range | 2-year warranty, extendable to 7 years |
| EdgeOne | Central console for up to 1,000 Edge devices; network-based CVE detection; AI alert clustering; built-in MCP connector; on-premises, AWS, Azure or Google Cloud | Multi-site network security teams | September 2026 | Partner quoted |
The September 2026 Edge release added four AI capabilities: Asset Intelligence, Policy Automation, Threat Alert Visibility and OT Integration. TXOne says policy automation cuts deployment effort by more than 90% and compresses rollouts from weeks to hours. These are company claims rather than independent test results.
Endpoint protection: Stellar
| Offering | Description and key capabilities | Target customer | Latest milestone | Commercial model |
|---|---|---|---|---|
| Stellar Protect (ICS license) | Prevention-first agent; automated baselines; CPSDR; 70,000+ recognized OT applications; network access control; Windows 2000 SP4 through Server 2025 and Windows 11, plus major Linux distributions | Legacy and modern OT endpoints | Windows coverage committed through 2031 | Per seat, 12 months |
| Stellar Protect (Kiosk license) | Lite subset for constrained single-purpose endpoints; Linux not supported | ATM-class endpoints | Current | Per seat, 12 months |
| Stellar Discover | Detection-only user-space sensor; one-minute install; no drivers, kernel access or reboot; coexists with IT endpoint tools | Assets that reject prevention agents | Previewed April 2026 | Fixed price, unlimited sensors, 6 months |
| StellarOne | Console for up to 30,000 endpoints per instance; air-gap updates by USB; Splunk, Sentinel and QRadar forwarding | Multi-site endpoint teams | Current | Partner quoted |
| Legacy names | StellarEnforce, renamed StellarProtect (Legacy Mode); Safe Lock TXOne Edition | Installed base | Being superseded | Support dependent on contract |
Security inspection: Element
| Offering | Description and key capabilities | Target customer | Latest milestone | Commercial model |
|---|---|---|---|---|
| Portable Inspector | Agentless USB 3.0 scanner for malware and asset data; 16 GB or 64 GB scanning space; Pro edition offers AES-256 secure storage up to 1 TB | Air-gapped and standalone systems | Current | Hardware and licence, quoted |
| Virtual Portable Inspector | Software form of Portable Inspector; no installation or reboot; distributed from ElementOne; supports hundreds of endpoints | Connected and distributed assets without usable USB ports | Announced June 2026; mid-July 2026 availability | Quoted |
| Safe Port | 12.1-inch touchscreen scanning station; up to 7,200 files per minute under laboratory conditions; fanless; cleanroom glove support | Plant entrances and contractor media control | Current | Hardware and licence, quoted |
| ElementOne | Fleet console for 1,000+ inspection devices; 100M+ searchable logs; syslog export | Multi-site inspection programs | Current | Quoted |
| Fab Tool Scan program | Inspection program used in semiconductor environments for more than two years; TXOne reports a 50% reduction in inspection cycle time | Fabs and equipment suppliers | Basis of Virtual Portable Inspector | — |
Governance and assessment: Sennin
| Offering | Description and key capabilities | Target customer | Latest milestone | Commercial model |
|---|---|---|---|---|
| SenninRecon | Passive assessment sensor on SPAN or mirror ports; 180+ protocols; VSAR scoring; IEC 62443-3-3 gap analysis; hardware or virtual appliance | Organizations starting or scaling OT programs | Previewed February 2026; launched April 2026 | Quoted |
| SenninOne | Cross-product governance for 500 to 100,000+ assets; VSAR; MITRE ATT&CK for ICS mapping; IT and OT approval workflows; TXOne claims 40–60% lower management overhead | Enterprise OT security leadership | April 2026; ServiceNow integration October 2026 | Quoted |
| ServiceNow integrations | Vulnerability Response Integration plus a Service Graph Connector for asset records | ServiceNow users | October 2026 | ServiceNow Store |
| SageOne | Earlier CPS governance platform launched in April 2024; Sennin now fills the governance role on TXOne's product pages | Installed base | June 2025 release | — |
Services and threat research
TXOne provides proof-of-value deployments, assessment support and 24/7 global support. Its Vulnerability Situational Awareness Rating (VSAR) combines CVSS, EPSS, attack telemetry and threat intelligence, then adds operational context such as air-gap status and virtual patch coverage. Threat intelligence includes Zero Day Initiative research. An annual OT/ICS cybersecurity report is produced with Frost & Sullivan.
Financial Narrative
TXOne publishes no audited income statement, balance sheet or cash flow statement. Its profits, margins, debt, cash and ratios are not publicly disclosed. The indicators below are the measurable figures available from company statements and Trend Micro's filings.
The FY2020 equity figure is the difference between the US$23.7M total and the US$12.9M Series A. Reported totals differ because some databases exclude pre-Series A capital: Tracxn shows US$134M, CB Insights shows US$144.69M, and PitchBook shows US$163M. The US$145M total is best supported by TXOne's disclosed rounds and SecurityWeek. PitchBook also labels the latest deal as PE growth and counts six financing rounds, but no matching announcement has been made.
Revenue trajectory. The company stated that sales crossed NT$100M in 2020, that first-half 2021 sales exceeded all of 2020, and that it was aiming for a third straight year of more than 100% growth. First-half 2022 revenue rose 107% year on year (TXOne Series B release, August 2022). In early 2023, Business Next described annual revenue as tens of millions of US dollars. Management set a US$100M target for 2025 in November 2024 and repeated it in March 2025. Whether TXOne reached that figure is not publicly disclosed.
Third-party estimates are weak and inconsistent. They include US$42.2M (Datanyze), US$63.6M (Bitscale) and a US$25M–50M band (Similarweb, May 2026). Those estimates suggest a business materially below the US$100M target, but none is audited.
Profitability signal. Trend Micro recorded ¥1,046M of equity-method losses in FY2025 across two affiliates, TXOne and General Mobile, without providing a split. If the whole amount came from TXOne, a 29.11% stake would imply a loss of about ¥3.6B. That figure is an upper-bound inference rather than a reported result. It does suggest that TXOne's economics remain consistent with an investment-stage company rather than a cash-generative one.
Capital structure. The Taiwan operating company has paid-in capital of NT$372M. The group's funding, including the US$121M Series B and extension, sits above that entity at the Cayman parent. Debt and net cash are not publicly disclosed. The lack of an announced primary round since May 2024 is the main financial monitorable. A Series C has been discussed publicly but not announced.
Headline assessment. The available evidence shows strong early growth, a broad customer count and significant venture funding. It does not establish margin structure, net retention, cash runway or current revenue. Those gaps would be central to any listing or strategic transaction.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansFinancial Detail
Product Lines
| Product line | Function in framework | Contents | Revenue share (FY2023, management estimate) |
|---|---|---|---|
Edge | Protect (network) | EdgeIPS, EdgeIPS Pro, vEdgeIPS Pro, EdgeFire, EdgeOne | 30–40% |
Stellar | Discover and Protect (endpoint) | Stellar Protect, Stellar Discover, StellarOne | 30–40% |
Element | Assess and validate (inspection) | Portable Inspector, Virtual Portable Inspector, Safe Port, ElementOne | 30–40% |
Sennin | Discover, Assess and govern | SenninRecon, SenninOne | Launched April 2026 |
Legal entity | Jurisdiction | Role | — |
TXOne Networks Inc. | Cayman Islands | Group parent; Trend Micro's equity-method investee | — |
睿控網安股份有限公司 | Taiwan | Operating company; 37.2 million shares held by the Cayman parent; authorized capital NT$600M; paid-in capital NT$372M | — |
TXOne Networks USA, Inc. | United States | Americas sales, marketing and support | — |
TXOne Networks Japan LLC | Japan | Japan sales and partner operations; formed April 2022; corporate number 3011003014578 | — |
Balance Sheet and Margin Analysis (%)
| Metric | FY2020 | FY2021 | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|---|---|
Equity raised in year (USD Mn) | 10.8 | 12.9 | 70 | — | 51 | — |
Cumulative equity raised (USD Mn) | 10.8 | 23.7 | 93.7 | 93.7 | 144.7 | 144.7 |
Trend Micro voting stake at year-end (%) | — | — | 38.54 | 35.86 | 29.45 | 29.11 |
Customers, approximate (count) | — | — | 2,000 | — | 3,600 | — |
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansDate of Statement Details
| Date of statement | Basis | Disclosed mix |
|---|---|---|
February 2023 | FY2023 estimate | US, Europe, Japan and other markets described as fairly even, at about 20% each |
November 2024 | Current run rate | Western markets to Asia about 40:60 |
March 2025 | Current run rate | About 80% of the market outside Taiwan |
Balance Sheet
| Metric | FY2022 | FY2024 |
|---|---|---|
Recorded post-money valuation (USD Mn) | 280 | 350 |
Equity raised in round (USD Mn) | 70 | 51 |
Peer Comparison
| Company | Value reference (USD Mn) | Revenue or ARR reference (USD Mn) | Implied multiple |
|---|---|---|---|
Nozomi Networks | 1,000 | 101.7 | 9.8 |
Claroty | 3,000 | 200 | 15.0 |
Armis | 7,750 | 300 | 25.8 |
TXOne Networks at 2025 revenue target | 350 | 100 | 3.5 |
Analyst Conclusions
Management guidance. No formal guidance is published. The last public targets were US$100M of revenue for 2025, a Series C and a US listing within two to three years. No consensus estimates exist.
Bull case.
-
TXOne owns a defensible prevention layer. Consolidation has concentrated visibility assets in strategic groups, leaving a clear role for a vendor that can enforce controls without disrupting production.
-
Semiconductor capital spending offers a high-value, standards-led niche. TSMC recognition, Applied Materials' involvement and eight of the top ten equipment makers provide references that are hard to replicate.
-
Sennin and Stellar Discover can raise conversion. If low-risk assessment turns into multi-product protection, average customer value and retention should improve.
Bear case.
-
Scale is falling behind. Nozomi reached US$101.7M in FY2025, while Claroty and Armis have much larger recurring revenue and stronger analyst positions.
-
Funding may be getting harder. A Series C discussed in March 2025 has not been announced, and the reported US listing threshold is about five times TXOne's stated revenue target.
-
Platform bundling may commoditize enforcement. Network and automation vendors can package adequate controls, while partners with competing ownership may steer customers away.
Key catalysts and monitorables (next 12 months):
Series C or strategic transaction: What to watch: Lead investor, amount and valuation; Why it matters: Tests growth and independence
Revenue disclosure: What to watch: Any statement on the US$100M milestone; Why it matters: Establishes actual scale
Trend Micro FY2026 filing: What to watch: Stake and equity-method result; Why it matters: Best public proxy for dilution and losses
Gartner and Forrester updates: What to watch: Placement and inclusion; Why it matters: Shows whether prevention gains analyst recognition
Sennin customer adoption: What to watch: Named wins and cross-sell evidence; Why it matters: Validates platform strategy
Mitsubishi Electric relationship: What to watch: Any change after the Nozomi deal; Why it matters: Tests a major strategic channel
SEMI requirements: What to watch: New fab supplier mandates; Why it matters: Could accelerate semiconductor demand
US leadership stability: What to watch: Retention and hiring in the Americas; Why it matters: Key to the highest-value growth region
Analyst verdict. TXOne Networks is one of the most strategically interesting independent assets left in OT security, but its public evidence base is incomplete. Its strengths are concrete. It has real depth in semiconductor manufacturing, long support for systems that other vendors have abandoned, and a product line that acts rather than merely observes. Those attributes matter more now that the market is moving from visibility to risk reduction. TXOne was effectively arguing for that transition before many analysts and competitors fully embraced it.
The company's challenge is that being right on the product direction does not guarantee scale. Nozomi, Claroty, Armis and Dragos all have either larger disclosed scale, stronger analyst positions, deeper capital or powerful new owners. TXOne's 2026 product cycle has been impressive, but Sennin and the AI Edge release are still early. Their value will depend on whether customers buy them as an operating system for OT risk rather than as extra features.
The absence of financial disclosure remains the largest analytical constraint. Revenue against the US$100M target, recurring mix, retention and cash runway are all unknown. Trend Micro's filings reveal dilution and a modest aggregate affiliate loss, but not the economics of the business.
A balanced judgment is that TXOne has a strong franchise, an unproven platform and an unresolved capital question. If it can demonstrate scale near US$100M with durable semiconductor and enterprise growth, its strategic value is likely to exceed its last recorded valuation by a wide margin. If funding remains absent and sales turnover persists, it risks becoming a valuable niche supplier rather than a category leader. A strategic deal or a major private round looks more probable than a near-term US IPO.
Unlock Company Financials
Unlock this company profile to view its financial data.
View Subscription PlansExecutive Leadership
Executive Leadership Team
| Name | Title | Tenure | Prior roles and education |
|---|---|---|---|
Akihiko Omikawa | Chairman | Current | Director and Executive Vice President of Trend Micro; earlier senior roles at Microsoft Japan; joined Trend Micro in 2003 |
Dr. Terence Liu | Founder and CEO | Since founding | Co-founder and CEO of BroadWeb; Corporate Vice President at Trend Micro; PhD in Computer Science, National Tsing Hua University |
YC Wu | Chief Financial Officer | Since October 2023 | Nearly three decades in global markets at Goldman Sachs, UBS, JPMorgan Chase and Citigroup; financing roles at Yeepay and Wecash |
Nasser Zayour | VP, Global Alliances and Channels | Since 2023 | Joined from Fortinet after more than two decades in alliances and enterprise security |
Frank Kuo | VP, APAC | Current | Previously built and led the Taiwan and Greater China business |
Gabi Novac | VP, Europe | Regional lead since 2026 | Joined in 2022 and developed the European channel program |
Yoshio Kondo | VP, Northeast Asia | Since June 2022 | 25 years at Microsoft Japan, including deputy head of its partner business division |
Todd Evers | VP, Americas | Current | Former CRO of Sonrai Security; earlier sales leadership roles at Salesforce, NICE and Neustar |
Sami Ayyoub | VP, Middle East and Africa | Since 2023 | About eight years at Trend Micro |
Governance Detail
| Role | Registered name |
|---|---|
Chairman | 大三川彰彥 (Akihiko Omikawa) |
Director | 劉榮太 (Terence Liu) |
Director | 張偉欽 |
Director | 陳添順 |
Director | 李貞觀 |
Director | 游永桂 |
Director | Kevin Todd Simzer |
Supervisor | 劉安國 |
Supervisor | 潘隆政 |
Major Shareholders
| Holder | Voting stake |
|---|---|
Trend Micro Incorporated | 29.11% |
Competitive Landscape
Key Competitors
| Company | Ownership | Latest public scale indicator | 2026 Gartner CPS position | Positioning against TXOne |
|---|---|---|---|---|
TXOne Networks | Private; Trend Micro 29.11% | Revenue not publicly disclosed; US$100M target for 2025 | Niche Player | Inline prevention, endpoint and fab depth |
Nozomi Networks | Mitsubishi Electric | FY2025 revenue US$101.7M, up 36.2% | Leader | Visibility and detection; independent subsidiary of a TXOne partner |
Claroty | Private | ARR estimated above US$200M; valuation above US$3B | Leader | Broad CPS platform and strong enterprise position |
Armis | ServiceNow | ARR above US$300M in November 2025; US$7.75B acquisition | Leader | Converged asset intelligence |
Dragos | Accenture majority stake announced June 2026 | Revenue not publicly disclosed | Leader | Threat intelligence and incident response |
Forescout | Private | Revenue not publicly disclosed | Challenger | Network visibility and access control |
Tenable | Listed | OT is part of a wider exposure platform | Challenger | Vulnerability management |
Fortinet | Listed | OT within a large network security platform | Challenger | Rugged firewalls and scale |
Palo Alto Networks | Listed | Leader in Forrester OT Wave, Q3 2026 | Niche Player | Platform consolidation |
Cisco | Listed | Large installed industrial network base | Niche Player | Network-embedded OT security |
Microsoft | Listed | Enterprise security ecosystem | Niche Player | Defender integration |
Honeywell | Listed | Automation incumbent | Niche Player | Control-system service relationships |
Darktrace | Private | Revenue not publicly disclosed in current ownership | Visionary | AI-led anomaly detection |
