Rockwell’s SecureOT Platform Secures Luminus Deal 18 Months Post-NIS2

As European energy companies brace for more aggressive NIS2 enforcement and a surge in state-sponsored attacks on industrial control systems, Luminus’s choice of Rockwell Automation’s SecureOT platform signals a pragmatic shift toward proactive OT security. For cybersecurity professionals, this deployment offers a case study in balancing asset visibility, regulatory compliance, and operational continuity in multi-vendor environments.

On July 22, 2026, Rockwell Automation announced that Luminus, a leading electricity producer and energy supplier in Belgium, has selected the SecureOT Platform to enhance cybersecurity resilience across its operational technology (OT) environment. The announcement marks a significant deployment of Rockwell’s industrial cybersecurity suite within a critical infrastructure operator facing stringent regulatory obligations under the European Union’s NIS2 Directive, which came into enforcement in October 2024. While the press release did not disclose financial terms or the number of sites covered, it framed the deployment as a structured model for building internal cybersecurity capability while managing risk across multiple locations.

“

On July 22, 2026, Rockwell Automation announced that Luminus, a leading electricity producer and energy supplier in Belgium, has selected the SecureOT Platform to enhance cybersecurity resilience across its operational technology (OT) environment.

The SecureOT Platform is an OT-specific technology that provides asset visibility, risk prioritization, and integrated vulnerability management. Crucially, it is vendor-neutral and aligned to industry standards IEC 62443 and the NIS2 framework, enabling industrial organizations to proactively address weak points without being locked into a single equipment supplier. For an energy producer like Luminus, which operates a diverse generation portfolio (including gas-fired, wind, and solar assets), managing cybersecurity across heterogeneous control systems is a top priority. The platform aims to give operators a unified view of all connected assets, identify exposure across multi-vendor environments, and direct remediation efforts based on actual risk rather than purely hypothetical threats.

This deployment occurs against the backdrop of escalating cyber threats targeting European energy infrastructure. Since Russia’s 2022 invasion of Ukraine, industrial control systems in the energy sector have been hit by disruptive malware (e.g., Industroyer2, PIPEDREAM) and reconnaissance campaigns by state-aligned actors. Simultaneously, the EU’s NIS2 Directive has raised the bar for cybersecurity requirements across essential and important entities, imposing incident reporting obligations, risk management mandates, and personal liability for senior management. Belgium transposed NIS2 into national law in 2024, meaning Luminus is subject to its full weight, including potential fines of up to €10 million or 2% of annual global turnover for non-compliance. The adoption of a dedicated OT security platform therefore reflects a dual driver: genuine threat defense and regulatory necessity.

Rockwell’s approach with SecureOT is notable for its emphasis on operational continuity and asset lifecycle management, not just detection. The platform’s risk prioritization capability helps avoid the “alert fatigue” that plagues many SOCs when instrumenting OT networks, while integrated vulnerability management enables more efficient patching schedules without forcing unplanned downtime—a critical concern for energy generation. The vendor-neutral design is also strategically important in a sector where plant-level equipment spans multiple generations from vendors like Siemens, ABB, Schneider Electric, and Emerson, giving Luminus the flexibility to apply a consistent security policy across its entire fleet.