DISPEL

A vendor logs in. A turbine keeps spinning. Nobody panics.

Somewhere right now a maintenance engineer in another country needs to reach a programmable controller inside a water treatment plant. A decade ago that meant a shared VPN password, a forgotten jump box, and a quiet prayer. Today, on a growing number of those plants, it means roughly thirty seconds and a session that records itself. The connection opens. The work happens. The door closes behind it.

That quiet swap - prayer for process - is the business Dispel is in. The Austin company builds a Zero Trust Engine for operational technology: the controllers, sensors, and machines that run factories, pipelines, and the power grid. It is not glamorous software. It is the kind of software that, when it works, you never think about. Which, as it happens, is exactly the point.

Factories were built to last 30 years. The internet was not.

Operational technology has a peculiar problem. The equipment is old, expensive, and allergic to downtime. You cannot simply patch a turbine on a Tuesday. So for decades, the people who run these systems did the sensible thing and kept them off the network entirely - the famous “air gap.”

Then the air gap sprung a leak. Vendors needed remote access. Engineers wanted live data. Predictive maintenance and AI promised savings too large to ignore. Every one of those conveniences punched a hole in the wall, and most of those holes were patched with consumer-grade VPNs never meant to guard a power station.

The result was a standoff: connect the plant and invite attackers, or stay disconnected and fall behind. Most OT teams chose to suffer quietly, which is the industrial sector's preferred coping mechanism.

Two brothers, one barn owl, and a contrarian idea.

Brothers Ethan and Ian Schmertzler founded Dispel in 2015. The origin story is, charmingly, ornithological. As young men they spent a summer at a Scottish bird-of-prey center and met Emily, a rescued owlet. Most birds there were impressive and distant. Emily was silent, unpredictable, always moving, always watching.

The brothers' bet was that those four traits - silent, unpredictable, mobile, alert - were a better model for security than the shield. So instead of building a taller wall, they built a wall that refuses to stand still. The technique is called Moving Target Defense: the platform continuously shifts remote access points and network pathways, so an attacker who maps the system on Monday finds a different system on Tuesday.

It is a tidy piece of logic. You cannot pick a lock that keeps changing shape. The harder trick was making that shape-shifting invisible to the engineer who just wants to fix a pump, and that is the part that took years.

From a bird sanctuary to the national grid.

One engine, four jobs.

The Dispel Zero Trust Engine bundles what used to be a tangle of separate tools. The idea is to give an OT operator a single, managed way to let the right people in, get the right data out, and watch the whole thing around the clock.

There is also the Wicket Industrial Gateway, a hardware appliance that pushes all of this out to the edge of the plant - the place where the cloud ends and the concrete begins.

The numbers industrial buyers actually care about.

OT customers are skeptical by trade - they have to be, because the failure mode is not a bad quarter, it is a chemical leak. So Dispel argues in the only currency that moves them: uptime and dollars. These figures come from Dispel's own customer reporting and should be read as vendor-cited.

Behind the figures sits a roster of integrations that reads like a who's who of the factory floor: ABB and Mitsubishi Electric on the automation side, TXOne Networks and Nozomi Networks on the security side, and AWS for distribution and cloud security tooling. In OT, partnerships are not press releases - they are how you get inside a plant at all.

“Pro allis” - for others.

Dispel sells to manufacturers, utilities, energy operators, and government. It also works inside the institutions that set the rules - NIST's National Cybersecurity Center of Excellence and the National Defense Industrial Association. The company frames its culture around a Latin phrase, pro allis, “for the sake of others,” and four values: Growth, Tenacity, Ownership, and Delight.

It would be easy to read that as the usual startup poetry. But when your customers run the water and the grid, “for others” is less a slogan than a job description. The mission is not abstract. It is the pump that has to keep pumping.

IT and OT are merging. Someone has to guard the seam.

The walls between corporate networks and plant networks are coming down, pushed by AI, remote work, and the simple economics of data. That convergence is unstoppable and a little terrifying, which is the precise combination that creates a market. Every new connection is a new opportunity and a new doorway.

Dispel's wager is that the winning approach is not a bigger lock but a door that keeps moving - one engineers barely notice and attackers cannot find. Whether Moving Target Defense becomes the OT standard is still an open question. But the demand it answers is not.

Back to that engineer reaching the controller inside the water plant. The session opens in thirty seconds. It records itself. It runs over a network that quietly rearranged itself the moment before, and will rearrange itself again the moment after. The turbine keeps spinning. The work gets done. And the most interesting thing about the whole transaction is that nobody had to think about it at all - which, for a barn owl, is the whole idea.